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Section I 


INTRODUCTORY REMARKS 

Paragraph 


The essential difference between monoalphabetic and polyalphabetic subatitufeon--- 1 

Pnmary classification of polyalphabetic systems...... 2 

Primary classification of pei iodic systems____ 3 

Sequence of study of pol\ alphabetic systems_ 4 


1 The essential difference between monoalphabetic and polyalphabetic substitution —a 
In the substitution methods thus far discussed it has been pomted out that their basic feature 
IS that of monoalphabeticity From the ciyptanalytic standpoint, neither the nature of the 
cipher symbols, nor their method of production is an essential feature, although these may be 
differentiating characteristics from the cryptographic standpomt It is true that in those cases 
designated as monoalphabetic substitution with variants or multiple equivalents, there is a 
departure, more or le s considerable, from strict monoalphabeticity In some of those cases, 
mdeed, there may be available two or more wholly mdependent sets of equivalents, which, 
moreover, may even be arranged m the form of completely separate alphabets Thus, while a 
loose termmology might permit one to designate such systems as polyalphabetic, it is better to 
reserve this nomenclature for those cases wherem polyalphabeticity is the essence of the method, 
specifically introduced with the purpose of impartmg a positional variation m the substitutive 
equivalents for plam-te\t letters, m accordance with some rule directly or indirectly connected 
with the absolute positions the plam-text letters occupy m the message This pomt calls for 
amphfication 

b In mono<ilplnbetic substitution with lariants the object of havmg different or multiple 
equivalents is to suppress, so far as possible by simple methods, the charactenstic frequencies 
of the letters occumng in plam text As has been noted, it is by means of these characteristic 
frequencies that the cipher equivalents can usually be identified In these systems the varjnng 
eqmvalents for plnm-te\t letters are subject to Uie free choice and caprice of the enciphermg 
clerk, if he is careful end conscientious m the work, he will really make use of all the different 
equivalents afforded by the system, but if he i= shp-shod and hurried in his work, he will use the 
same equivalents repeatedly rather than take pains and time to refer to the charts, tables, or 
diagrams to find the variants Moreover, and this is a crucial pomt, even if the mdmdual 
enciphering clerks are extremely careful, when many of tiiem employ the same system it is entirely 
impossible to insure a complete diversity m the encipherments produced by two or more clerks 
working at different message centers The result is mevitably to produce plenty of repetitions 
in the texts emanating from several stations, and when texts such as these are aU available for 
study they are open to solution, by a compaiison of their sumlanties and differences 

c In true polyalphabetic systems, on the other hand, there is estabhshed a rather defimte 
procedure which automatically determines the shifts or chaises m equivalents or m the manner 
in which they are mtroduced, so that these changes are beyond the momentary whim or choice of 
the encipheung clerk TVTien the method of shifting or changmg the equivalents is scientifically 
sound and sufficiently complex, the research necessary to establish the values of the cipher 
characters is much more prolonged and difficult than is the case even m complicated monoalpha¬ 
betic substitution with variants, as will later be seen These are the objects of true polyalpha¬ 
betic substitution systems The number of such systems is qmte large, and it will be possible to 
( 1 ) 









describe in detail the cryptanalysis of only a few of the more common or typical examples of 
methods encountered m practical militaiy communications 

d The three methods, (1) smgle-equivalent monoalphabetic suhslitiition, (2) monoalpha- 
betic substitution with vanants, and (3) true polyalphabctic substitution, show the following 
relationships as regards the equivalency between plam-text and cipher-text units 

A In method (1), there is a set of 26 symbols, a plam-text letter is always represented by 
one and only one of these symbols, conversely, a symbol always represents the same plam-text 
letter The equivalence between the plain-text and the cipher letters is constant m both enci¬ 
pherment and decipherment 

B In method (2), there is a set of n symbols, where n may be any number greater than 26 
and often is a multiple of that number, a plam-text letter may be represented by 1, 2, 3, 
different symbols, conversely, a symbol always represents the same plam-text letter,the same as 
IS the case m method (1) The equivalence between the plain-text and the cipher letters is 
vanable in encipherment but constant m decipherment ‘ 

C In method (3) there is, as m the first method, a set of 26 symbols, a plem-text letter 
may be repiesented by 1, 2, 3, 26 diffeient symbols, con\ersely, a symbol may repiesent 

1, 2, 3, 26 different plam text letters, dependmg upon the system and the specific key 

The equivalence between the plam-text and the cipher letters is vanable m both encipherment 
and decioherment 

2 Fiimary classification of polyalphabetic systems —a A pnmaiy classification of poly- 
alphabetic systems into two rather distinct types may be made (1) penodic systems and (2) 
aperiodic systems When the enciphenng process involves a cryptographic treatment which is 
repetitive in character, and which results in the prodiiction of cyclic phenomena in the crypto¬ 
graphic text, the system is termed penodic When tlie enciphering piocess is not of the type 
desenbed in the foregoing general leims, the system is termed apenodu The substitution m 
both cases involves the use of two oi more tiphei alphabets 

b The cychc phenomena mherent m a periodic system may be exhibited externally, in 
which case they are said to be patent, or they may not be exhibited externally, and must be un¬ 
covered by a pielimmary step m the analysis, in which case they are said to be latent The 
periodicity may be quite definite m nature, and therefore determinable with mathematical 
exactitude allowing for no vanabdity, in which case the periodicity is said to he fixed In other 
instances the periodicity is more or less flexible in character and even though it may be deter- 

* There is a monoalphabetic method in which the inverse result obtains, the correspondence being constant 
in enciphermeit but vanable in decipherment, this is a method not found in the usual books on cryptography 
but in an essay on that subject by Edgar Allan Poe, entitled, m some editions of his works, A few words on secret 
writing and, in other editions, Cryptography The method is to draw up an enciphering alphabet such as the 
following (using Poe’s example) 

Plain . ABCDEFGHIJKLMNOPQRSTUVWXYZ 

Cipher_ SUAVITFRINMODOFORTITERINRE 

In such an alphabet, because of repetitions in the cipher component, the plam-text equivalents are subject to a 
considerable degree of vanability, as will be seen in the deciphenng alphabet 

Cipher. ABCDEFGHIJKLMNOPQRSTUVWXYZ 

fC MGO E KJL HAFBD 

Plain I ^ X N Q R 

.I Z S PVT 

I W Y 

This type of variabihty gives nse to ambiguities in decipherment A cipner group such as TIE, would yield 
such plam-text sequences as REG, FIG, TEU, REU, etc , which could be read only by context No system of such a 
character would be practical for serious usage For a further discussion of this type of cipher alphabet see 
Friedman, Wilham F , Edgar Allan Poe, Cryptographer, Signal Corps Bulletins Nos 97 and 98, 1937-38 
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mmable mathematically, allowance must be made for a degree of vanabdity subject to limits 
controlled by the specific system under investigation The periodicity is in tlus case said to be 
Hexihle, or uinable within limits 

3 Primary classification of penodic systems —a Penodic polyalphabetic substitution 
systems may pnmanly be classified mto two kmds 

(1) Those m which only a few of a whole set of cipher alphabets are used m enciphermg 
mdividual messages, these alphabets bemg employed repeatedly in a fixed sequence throughout each 
message Because it is usual to employ a secret word, phrase, or number as a key to determme 
the number, identity, and sequence with which the cipher alphabets are employed, and this 
key IS used over and over again m encipherment, this method is often called the repeating-key 
system, or the repeaiing-alphahst system It is also sometimes referred to as the mvltiple-alpha- 
bet system because if the keyii^ of the entire message be considered as a whole it is composed 
of multiples of a short key used repetitively* In this text the designation “repeatmg-key 
system” will be used 

(2) Those m which all the cipher alphabets compnsmg the complete set for the system are 
employed one after the other successively m the encipherment of a message, and when the 
last alphabet of the senes has been used, the encipherer begms over agam with the first alphabet 
This IS commonly referred to as a progressive-alphabet system because the cipher alphabets are 
used m progression 

4 Sequence of study of polyalphabetic systems —a In the studies to be followed m con¬ 
nection with polyalphabetic systems, the order m which the work wiU proceed conforms very 
closely to the classifications made m paragraphs 2 and 3 Penodic polyalphabetic substitution 
ciphers will come first, because they are, as a rule, the simpler and because a thorough under¬ 
standing of the prmciples of their analysis is prereqmsite to a comprehension of how apenodic 
systems are solved But m the final analysis the solution of examples of both tjrpes rests upon 
the conversion or reduction of polyalphabeticity mto monoalphabeticity If tlus is possible, 
solulaon can always be achieved, granted there are sufficient data m the final monoalphabetic 
distnbutions to permit of solution by recourse to the ordmary prmciples of frequency 

h First m the order of study of penodic systems will come the analysis of repeatmg-key 
systems Some of the more simple vaneties wiU be discussed m detail, with examples Subse¬ 
quently, ciphers of the progressive type will be discussed There will then follow a more or less 
detailed treatment of apenodic systems 

* French terminology caUs this the “double-key method”, but there is no logic m such nomenclature 
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Section II 

CIPHER ALPHABETS FOR POLYALPHABETIC SUBSTITUTION 

Paragraph 

Classification of Cipher alphabets Upon the basis of their demation . 5 

Primary components and secondary alphabets.. g 

Pnmary components, cipher disks, and square tables .... 7 

6 Classification of cipher alphabets upon the basis of their derivation —a The substitu¬ 
tion processes m polyalphabetic methods mvolve the use of a plurality of cipher alphabets 
The latter may be derived by vaiious schemes, the exact nature of which deterrames the principal 
characteristics of the cipher alphabets and plays a very important role m the preparation and 
solution of polyalphabetic cryptograms For these reasons it is advisable, before proceedmg to a 
discussion of the principles and methods of analysis, to point out these various types of cipher 
alphabets, show how they are produced, and how the method of their production or derivation 
may be made to yield important clues and short-cuts m analysis 

h A primary classification of cipher alphabets for polyalphabetic substitution may be made 
into the two following types 

(1) Independent or unrelated cipher alphabets 

(2) Derived or mterrelated cipher alphabets 

c Independent cipher alphabets may be disposed of in a very few words They are merely 
separate and distinct alphabets show mg no relationship to one another in any way They may 
be compiled by the vaiious methods discussed m Section IX of Elementary Military Cryptography 
The solution of cryptograms written by means of such alphabets is rendered more difficult h\ 
reason of the absence of any relationship between the equivalents of one cipher alphabet and 
those of any of the other alphabets of the same cryptogram On the other hand, from the point of 
view of practicabihty in their production and then handlmg m cryptographmg and decryptograph- 
mg, they present some difficulties which make them less favoied by ciyptographers than cipher 
alphabets of the second type 

d Derived or mterrelated alphabets, as their name indicates, are most commonly produced 
by the interaction of two pnmary components, which when juxtaposed at the various pomts of 
coincidence can be made to yield secondary alphabets ‘ 

6 Primary components and secondary alphabets—Two basic, slidable sequences or com¬ 
ponents of n characters each wnll yield n secondary alphabets The components may be classi¬ 
fied accordmg to various schemes For cryptanalytic puiposes the following classification will be 
found useful 

Case A The pnmaiy components are both noimal sequences 

(1) The sequences proceed m the same direction (The secondary alphabets are direct 
standard alphabets ) (Pars 13-15 ) 

(2) The sequences proceed m opposite directions (The secondary alphabets are reversed 
standard alphabets, they are also reciprocal cipher alphabets ) (Par 13i, lAg ) 

Case B The pnmary components are not both normal sequences 

(1) The plam component is normal, the cipher component is a mixed sequence (The 
secondary a lphabets are mixed alphabets ) (Par 16-25 ) 

‘ See Sec, VIII and IX, Etementary Military Cryptography 
(4) 


(2) The plam component is a mixed sequence, the cipher component is normal (The 
secondary alphabets are mixed alphabets ) (Par 26 ) 

(3) Both components are mixed sequences 

(a) Components are identical mixed sequences 

I Sequences proceed m the same direction (The secondary alphabets are 
mixed alphabets ) (Par 28 ) 

II Sequences proceed in opposite directions (The secondary alphabets aio 
reciprocal mixed alphabets ) (Par 38 ) 

(b) Components are different mixed sequences (The secondary alphabets are mixed 

alphabets ) (Par 39 ) 

7. Primary components, cipher disks, and square tables— a In preceding texts it has 
been shown that the equivalents obtainable from the use of quadncular or square tables may be 
duplicated by the use of revolvmg cipher disks or of slidmg pnmary components It was also 
stated that there ore vanous ways of employing such tables, disks, and sliding components 
Cryptographically the results may be quite diverse from diffeient methods of using such para¬ 
phernalia, smee the specific equivalents obtained from one method may be altogether different 
from those obtained from another method But from the cryptanalytic point of view the 
diversity referred to is of hltle significance, only m one or two cases does the specific method of 
employing these cryptographic mstrumentahties have an important beanng upon the procedure 
m cryptanalysis However, it is advisable that the student learn somethmg about these different 
methods before proceedmg with further work 

b There are, not two, but/o«r letters involved m every case of finding equivalents bv means 
of shdmg pnmary components, furthermore, the determination of an equivalent for a given 
plain-text letter is representable by two equations involving four elements, usually letters 
Three of these letters are by this time well-known to and imderstood by the student, viz, 0^, 0p, 
and 0c The fourth element or letter has been passed over without much comment, but ciypto- 
giaphicaUy it is just as important a factor as the other three Its function may best be indic ated 
by notmg what happens when two pnmary components are juxtaposed, foi the purpose of finding 
equivalents Suppose these components are the following sequences 

(1) ABCDEFGHIJKLMNOPQRSTUVWXYZ 

(2) FBPYRCQZIGSEHTDJUMKVALWN0X 

Now suppose one is merely asked to find the equivalent of Pp when the key letter is K Without 
furthei specification, the cipher equivalent cannot be stated, foi it is necessary to know not only 
which K wall be used as the key’ letter, the one m the component labeled (1) 01 the one m the 
component labeled (2), but also what letter the will be set agamst, in order to juxtapose the 
two components Most of the time, in preceding texts, these two factors have been tacitly 
assumed to be fixed and well understood the Kk is sought m the mixed, or cipher component, 
and this K is set against A m the normal, or plam component Thus 

Plam Index 

(1) Plam. ABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZ 

(2) Cipher.. FBPYRCQZIGSEHTDJUMKVALWNOX 

T T 

Cipher Key 


With this settmg Pp=Z, 
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i^symbolized A. The index letter 
constitutes the fourth element involved in the two equations applicable to the findmg of equiva¬ 
lents by sliding components The four elements are therefore these 


(1) The key letter, 

(2) The index letter, Gj 

(3) The plain-text letter, Gp 

(4) The cipher letter, Gp 

The mdex letter .3 commonly the m.t..l letter of the component, but this, too, le only a eon- 
vention It might be any letter of the sequence constituting the component, as agreed upon by 
the correspondents Howrer, in the subsequent discussion it mil be assumed that the index letter 
IS the initial letter oj the component in which it is located, unless othermse stated 
d In the foregoing case the enciphering equations are as follows 

(I) Kk=:A„ Pp=Zc 

But there IS nothing about the use of slidmg components ivhich excludes other methods of findmg 
equivalents than that shown above For mstance, despite the labehng of the two components 
as shown above there is nothmg to prevent one from seekmg the plam-text letter m the com- 
ponent labeled (2), that is, the cipher component, and taking as its cipher equivalent the letter 
opposite it in the other component labeled (1) Thus 

Cipher Index 

(1) ABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZ 
("2) fbpyrcqzigsehtdjumkvalwnox 
t t 

Plain Kev 

Thus 

(II) Kk=A,, Pp=Kp 

c Since equations (I) and (II) jield different resultants, even with the same index, key 
and plain-text letters It IS obvious that an accurate formula to cover a specific pair of enciphering 
equations must include data showing in what component each of the four letters comprising the 
equations is located Thus, equations (I) and (II) should read 

(I) Kh in component (2)=A. m component (1), P„ m component (1)=Z„ in component (2) 
For component (2)^A,m component (1), P„ m component (2)= K„ in component (1) 

I or the sake of brevity, the following notation vill be used 


(1) lfk/2 —Ai/i, Pp/i = Zo/2 

(2) Kfe/2=Ai/i, Pp/2=Kc/i 

eoua{ion“fbe?“® slidmg components and the four letters entenng mto an enciphermg 
Sd the same resultants possible for the same set of component! 

twdveTff f / ^ differences m resultants arise from a set 

parSaph conditions, as set forth below (the notation adopted m sub- 


(1) Git/2—Gi/i, Gp/i=Go/2 

(2) Gk/2 = G,/i, Gp/2 = Ge/, 

(3) 0k/i = Gi/2, Gp/i=Gc/2 

(4) e»/i==G,/2, epfl=G„/, 

(5) Gk/2=Gp/i, G,/i=Ge/2 

(6) Gk/2=0o/i, 0m=©p/3 


(7) 

0k/a= 

= 0p/l 

01/S 

= 00/1 

(8) 

0k/2 = 

= 0c/I 

01/2 

= 0P/1 

(9) 

0k/i= 

= 0p/2 

01A 

= 00/2 

(10) 

0k/I = 

-0O/2| 

01/1 

= 0p/2 

(11) 

0k/l = 

~0p/2j 

01/2 

= 0«/l 

(12) 

0k/l = 

= 00/2) 

01/2 

= 0p/» 


7 


g The twelve resultants obtainable fiom juxtaposing sliding components as indicated under 
the preceding subparagraph may also be obtained either from one square table, m which case 
twelve difierent methoUs of findmg equivalents must be applied, or from twelve diffoicrit square 
tables, in which case one standard method of finding equivalents will serve all purposes 

h If but one table such as that shown below as Table 1-A is employed, the various methods 
of findmg equivalents are difficult to keep in mind 

Table I-A 


A 

B 

C 

D 

E 

F 

G 

H 

I 

J 

K 

L 

M 

N 

0 

P 

Q 

R 

s 

T 

U 

V 

W 

X 

Y 

Z 

F 

B 

P 

Y 

R 

C 

Q 

Z 

I 

G 

S 

E 

H 

T 

D 

J 

u 

M 

K 

V 

A 

L 

w 

N 

0 

X 

B 

P 

Y 

R 

C 

Q 

Z 

I 

G 

s 

E 

H 

T 

D 

J 

u 

M 

K 

V 

A 

L 

W 

N 

0 

X 

F 

P 

Y 

R 

C 

Q 

z 

I 

G 

S 

E 

H 

T 

D 

J 

U 

M 

K 

V 

A 

L 

W 

N 

0 

X 

F 

B 

Y 

R 

C 

Q 

z 

I 

G 

S 

E 

H 

T 

D 

J 

U 

M 

K 

V 

A 

L 

W 

N 

0 

X 

F 

B 

P 

R 

C 

Q 

z 

I 

G 

S 

E 

H 

T 

D 

J 

U 

M 

K 

V 

A 

L 

W 

N 

0 

X 

F 

B 

P 

Y 

C 

Q 

z 

I 

G 

S 

E 

H 

T 

D 

J 

U 

M 

K 

V 

A 

L 

W 

N 

0 

X 

F 

B 

P 

Y 

R 

Q 

Z 

I 

G 

S 

E 

H 

T 

D 

J 

U 

M 

K 

V 

A 

L 

W 

N 

0 

X 

F 

B 

P 

Y 

R 

C 

Z 

I 

G 

S 

E 

H 

T 

D 

J 

U 

M 

K 

V 

A 

L 

W 

N 

0 

X 

F 

B 

P 

Y 

R 

C 

Q 

I 

G 

S 

E 

H 

T 

D 

J 

U 

M 

K 

V 

A 

L 

W 

N 

0 

X 

F 

B 

P 

Y 

R 

C 

Q 

z 

G 

S 

E 

H 

T 

D 

J 

U 

M 

K 

V 

A 

L 

W 

N 

0 

X 

F 

B 

P 

Y 

R 

C 

Q 

Z 

I 

s 

E 

H 

T 

D 

J 

U 

M 

K 

V 

A 

L 

W 

N 

0 

X 

F 

B 

P 

Y 

R 

C 

Q 

Z 

I 

G 

e 

H 

T 

D 

J 

U 

M 

K 

V 

A 

L 

W 

N 

0 

X 

F 

B 

P 

Y 

R 

C 

Q 

Z 

I 

G 

S 

H 

T 

D 

J 

U 

M 

K 

V 

A 

L 

W 

N 

0 

X 

F 

B 

P 

Y 

R 

C 

A 

Z 

I 

A 

S 

E 

T 

D 

J 

A! 

A 

A 

V 

A 

L 

W 

N 

0 

Al 

A 

B 

A 

Y 

R* 

C 

A 

z 

I 

G 

s 

E 

H 

D 

J 

U 

M| 

K 

V 

A 

L 

W 

N 

0 

X 

F 

B 

A 

Y 

R 

C 

Ai 

z 

I 

G 

s 

E 

H 

T 

J 

A 

M 

K 

V 

A 

L 

W 

N 

A 

X 

F 

B 

p 

Y 

R 

C 

Q 

z 

I 

G 

S 

E 

H 

T 

D 


M 

K 

V 

A 

L 

W 

A 

0 

X 


B 

P 

Y 

R 

c 

A 

Z 

I 

G 

A 

E 

H 

Ai 

D 

J 

M 

K 

V 

A 

L, 

w 

N 

0 

X 

F 

B 

P 

Y 

R 

C 

Q 

z 

I 

G 

S 

E 

H 

T 

D 

J 

U 


_V 

A 

L 

W 

N 

0 

X 

F 

B 

P 

a! 

R 

C 

A 

z 

A 

A 

A 

E 

H 

T 

D 

J 

U 

M 

V 

A 

L 

W 

N| 

0 

X 

F 

B 

P 

Y 

R 

C 

Q 

z 

I 

G 

s 

E 

H 

T 

D 

zi 

A 

A 

K 

A 

L 

W 

N 

A' 

A 

F 

B 

P 

A 

R 

A 

Ai 

Z 

I 

G 

A 

E 

H 

T 

D 

J 

u 

M 

K 

V 

L 

W 

N 

A 

A 

A 

A 

P 

Y 

R 

c 

Q 

z 

A 

A 

a! 

A 

H 

T 

D 

J 

U 

M 

K 

V 

A 

W 

N 

0 

X 

F 

B 

p 

Y 

R 

C 

A' 

z 

I 

G 

A 

E 

H 

T 

D 

J 

u 

M 

K 

V 

A 

L 

N 

0 

A 

F 

B 

A 

A 

R 

C 

A 

A 

A 

G 

S 

E 

A 

A 

A 

J 

U 

M 

A 

V 

A 

A 

W 

0 

X 

F 

B 

P 

Y 

R 

C 

A 

z 

I 

G 

A 

E 

H 

T 

D 

d 

U 

M 


A 

A 

A 

A 

N 

X 

F 

B 

P 

Y 

R 

c 

Q 

z 

I 

G 

s 

E 

H 

T 

D 

J 

U 

M 

K 

ll 

A 

L 

w 

N 

0 


For example 

(1) For enciphenng equations G»/2=0i/i, 0p/i=0o/2 

Locate Gp m top sequence, locate Gi m first column, 

Gc is letter within the square at intersection of the tw o lines thus determined 
Thus. 


Kk/2=A,/i, Pp/i=Z< 

























(2) For enciphering equations 0k/2=e,/j, 6^/2 —Qcn 

Locate in first column, follow line to right to 0p, proceed up this column, ©o is 
letter at top 
Thus 

Fk/2=A|/], Pp/2=Kc/i 

(3) Foi enciphering equations ©j„ = ©,/2, ©p/i = ©e/2 

Locate ©j, in top sequence and proceed down column to ©i, 

Locate ©p in top sequence, ©, is letter at other corner of rectandc thus formed 
Thus 

KkA-A,„, Pp/i=Xe/2 

Ody three different methods have been shown and the student no doubt already has encountered 
difficulty m Iteeping them segregated in his mind It would obviously be very confusing to try 
to remember all twelve methods But if one standard or fixed method of finding eqiuvalents is 
follow ed with several different tables, then this difficulty disappears Suppose that the following 
method IS adopted Arrange the square so that the plain-text letter may be sought in a separate 
sequence, airanged alphabetically, above the square and so that the key letter may be sought 
in a separate sequence, also arranged alphabetically, to the left of the square, look for the plain¬ 
text letter m the top row, locate the key letter in the 1st column to the left, find the letter stand- 
ing within the square at the intersection of the vertical and horizontal lines thus determined 
Then twelve squares, equivalent to the twelve different conditions listed in subparagraph / can 
readily be constructed They are all shown in Appendix 1, pp 96-107 

r tables are examined carefullv, certain interesting points aie noted 

In the fiist place, the tables may be paired so that one of a pair n ay serve foi enciphering and the 
other of the pan mav servo for deciphering, oi vice versa For example, tables I and TI bear this 
reciprocal relationship to each other. III and IV, V and VI, VII and VIII, IX and X, XI and 
XII In the second place, the internal dispositions of the letters, although the tables are denved 
from the same pair of components, are quite diverse For example, in table I-B the horizontal 
sequences are identical, but are merely displaced to the right and to the left different intervals 
according to the successive key letters Hence this square shows what may be termed a hor¬ 
izontally-displaced, direct symmetry of the cipher component Vertically, it show s no symmetry 
or If there is symmetry, it is not visible ^ But when Table I-B is more carefullv exammed an 
invisible, or indirect, vertical symmetry may be discerned wheie at first glance it Ts not apparent 
it one takes any two columns of the table, it is found that the interval between the members of 
any pair of letters in one column is the same as the interval between the members of the homolo¬ 
gous pair of letters in the other column, ij the distance is measured on the cipher component For 
exainple, considei the 2d and loth columns (headed by L and I, respectively), take the letters P 
and G in the 2d column, and J and W in the 15th column The distance between P and G on the 
cipher component is 7 intervals, the distance between J and W on the same component is also 
7 intervals This phenomenon implies a kind of hidden, or latent, or indiiect symmetry within 
Je cipher square In fact, it may be stated that every ta ble which sets forth in systematic fashion 
le various secondarv alphabets derivanle by sliding two primary sequences through all points of 
coincidenc e to find cipher equivalents must show some kind of symmetry, both horizontally and 

hPn ' f ® table shows the plam-component sequence, but this is merelv 

cnlnru ! f 1 equivalents in this case is such that this sequence is bound to appear in that 

the Dlain enmnon A, B, C, Z, and this sequence happens to be identical with 

Tabfes Tx and X ^ ® ^ aPPheable to the first row of 
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vertically The symmetry may be termed visible or direct, if the sequences of letters in the rows 
(or columns) aie the same throughout and are identical with that of one of the primary com¬ 
ponents, it may be termed hidden or indirect if the sequences of letters in the rows or columns 
are different, apparently not related to either of the components, but are in reality decimations 
of one of the primary components 

2 When the twelve tables of Appendix 1 are examined in the fight of the foregoing remarks, 
the type of symmetry found m each may be summarized m the following manner 



Of these twelve types of cipher squares, corresponding to the twelve different ways of using a 
pair of sliding primary components to derive secondary alphabets, the ones best known and 
most often encountered in cryptographic studies are Tables I-B and II, referred to as being of 
the Vigen^re type, Tables V and VI, referred to as being of the Beaufort type, and Tables IX 
and X, referred to as being of the Delastelle type It will be noted that the tables of the Dela- 
stelle type show no direct or visible symmetry, either horizontally or vertically and because of 
this are supposed to yield more secunty than do any of the other types of tables But it will 
presently be shown that the supposed increase in security is more illusoiy than real 

k 1 he foregomg facts concermng the various types of quadricular tables generated by diveise 
methods of using shding primary components or their equivalent rotating cipher disks will be 
employed to good advantage, when the studies presently to be undertaken will bring the student 
to the place where he can comprehend them m the analysis of polyalphabetic systems But in 
order not to confuse him with a multiplicity of details which have no direct bearing upon basic 
prmciples, one and only one standard method of finding eqmvalents by means of sliding compo¬ 
nents will be selected from among the twelve available, as set forth m the precedmg subpaia- 
graphs Unless otherwise stated, this method will be the one denoted by the first of the formulae 
listed m subpar /, mz 

0k/2 = 0|/l, 0 b/1=0C/2 

Calhng the plain component “l” and the cipher component “2”, this will mean that the keyletter 
on the cipher component will be set opposite the index, which will be the first letter of the plain 
component, the plain-text letter to be enciphered will then be sought on the plain component and 
its equivalent will be the letter opposite it on the cipher component 










































THEORY OF SOLUTION OF REPEATING-KEY SYSTEMS 

The three steps in the analysis of repeating-key systems Paragraph 

First step finding the length of the period. .. . 9 

General remarks on faotonng.___ ' ' jq 

Second step distributing the cipher text into the component monoalphabets „ _ 11 

Third step solving the monoalphabetic distributions_ _ 12 

8 The three steps m the analysis of repeating-key systems —a The method of enciphering 
according to the prmciple of the repeating key, or repeating alphabets is adequately explained in 
Section XI of Elementary MxMary Cryptography, and no further reference need be made at this 
time The analysis of a cryptogram of this type, regardless of the kind of cipher alphabets 
employed, or their method of production, resolves itself into three distinct and successive steps 

(1) Determination of the length of the repeating key, which is the same as the determination 
of the exact number of alphabets involved in the cryptogram, 

(2) Allocation or distribution of the letters of the cipher text into the respective cipher alpha¬ 
bets to which they belong This is the step which reduces the polyalphabetic text to mono- 
alphabetic terms, 

(3) Analysis of the individual monoalphabetic distnbutions to deternune plain-text values of 
the cipher letters in each distribution or alphabet 

h The foregoing steps will be treated in the order m which mentioned The first step may 
be described briefly as that of determining the period The second step may be described briefly 
as that of reduction to monoalphabetic terms The third step may be designated as iderdijicatwn of 
cipher-text values 

9 First step. finding the length of the period — a The determination of the period, that 
IS, the length of tne key or the number of cipher alphabets involved in a cryptogram enciphered 
by the repeatmg-key method is, as a rule, a relatively simple matter The cryptogram itself 
usually manifests externally certain phenomena which are the direct result of the use of a repeat¬ 
ing key The pnnciples mvolved are, however, so fundamental in cryptanalysis that their 
elucidation warrants a somewhat detailed treatment This will be done in connection with a 
short example of encipherment, shown m Fig 1 


THE ARTILLERY BATTALION MARCHING IN THE REAR OF THE ADVANCE GUARD KEEPS 
ITS COMBAT TRAIN WITH IT INSOFAR AS PRACTICABLE 
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[Key BLUE, usmg direct standard alphabets] 
Cipher Alphabets 




ABCDEFGH 

IJKLMNOPQRSTUVWX 


[ (1)..... 

BCDEFGHI 

JKLMNOPQR 

S T U V W X Y 

i Cipher 

1 

1 (2)_ 

LMNOPQRS 

TUVWXYZAB 

C D E F G H I 

1 (3)_ 

UVWXYZAB 

CDEFGHIJKLMNOPQR 

1 

1(4)_ 

EFGHIJKLMNOPQRSTU 

V W X Y Z A B 

] 

BLUE 

BLUE 

BLUE 

BLUE 

' T H E A 

A R D K 

T H E A 

U S Y E 

A R D K 

B C X 0 

R T I L 

E E P S 

R T I L 

S E C P 

E E P S 

F P J W 


L E R Y 

I T S C 

L E R Y 

M P L C 

I T S C 

J E M G 


B A T T 

0 M B A 

B A T T 

C L N X 

0 M B A 

P X V E 


ALIO 

T T R A 

ALIO 

B W C S 

T T R A 

U E L E 


N M A R 

I N W I 

N M A R 

0 X U V 

I N W I 

J Y Q M 


CHIN 

T H I T 

CHIN 

D S C R 

T H I T 

U S C X 


G I N T 

I N S 0 

G I N T 
H T H X 

I N S 0 

J Y M S 


HERE 

F A R A 

HERE 

I P L I 

F A R A 

G L L E 


A R 0 F 

S P R A 

A R 0 F 

B C I J 

S P R A 
TALE 


T H E A 

C T I C 

T H E A 
U S Y E 

C T I C 

D E C G 


D V A N 

C E G U 

ABLE 

D V A N 
E G U R 

C E G U 
D P A Y 

ABLE 

B M F I 


a 

a 

6 

b 


Cryptogram 


U S Y E S 
H X I P L 
J E M G P 


E C P M P 
I B C I J 
X V E U E 


L C C L N 
U S Y E E 
L E J Y Q 


X B W C S 
G U R D P 
M U S C X 


0 X U V D 
A Y B C X 
J Y M S G 


S C R H T 
0 F P J W 
L L E T A 



LEDEC GBMFI 
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h Regal dless of what system is used, identical plain-text letters enciphered by the same 
cijjher alphabet ‘ must yield identical cipher letters Refeiring to Fig 1, such a condition is 
1)1 ought about every time that identical plain-text letters happen to be enciphered with the same 
key-letter, or every time identical plain-text letters fall into the same column in the encipher¬ 
ment “ Now since the number of columns or positions with respect to the key is veiy hinited 
(except in the case of very long key words), and since the repetition of letters is an inevitable 
condition in plain text, it follows that there w ill be in a message of fair length many cases where 
identical plain-text letteis must fall into the same column They will thus be enciphered by the 
same ciphei alphabet, resulting, therefore, in ti i pi eduction of many identical letteis in the 
cipher text and these will represent identical letters in the plain text When identical plain-text 
polygrajihs fall into identical columns the result is the formation of identical cipher-text poly¬ 
graphs, that IS, repetitions of groups of 2, 3, 4, letters are exhibited in the cryptogram 
Repetitions of this type will hereafter be called causal repetitions, because they are produced by 
a definite, tiaceable cause, viz, the encipherment of identical letters by the same cipher alphabets 
c It wall also happen, however, that different plain-text letters falling m different columns 
will, by mere accident, produce identical cipher letters Note, for example, in Fig 1 that in 
Column 1, Rp becomes S(, and that m Column 2, Hp also becomes Sp The production of an identical 
cipher text letter in these two cases (that is, a repetition where the plam-text letters are different 
and enciphered by different alphabets) is merely fortuitous It is, in every day language, “a 
mere coincidence”, or “an accident ” Foi this reason repetitions of this type will hereafter be 
called accidental repetitions 

d A consideration of the phenomenon pointed out m c makes it obvious that in polyalpha- 
betic ciphers it is important that the cryptanalyst be able to tell whether the repetitions he finds 
m a specific case are causal or accidental in their origin, that is, whether they represent actual 
encipherments of identical plain-text letters by identical keying elements, or mere comcidences 
brought about purely fortuitously 

e Now' accidental repetitions will, of course, happen fairly frequently with individual letters, 
but less frequently with digraphs, because m tlus case the same kind of an “accident” must take 
place twice in succession Intmtively one feels that the chances that such a purely fortuitous 
coincidence will happen two times m succession must be much less than that it will happen eveiy 
once in a while m the case of single letters Similarly, mtmtion makes one feel that the chances 
of such accidents happening m the case of three or more consecutive letters are still less than in 
the case of digraphs, decreasing very rapidly as the lepetition increases m length 

y The phenomena of cryptographic repetition may, fortunately, be dealt with statistically, 
thus talcing the matter outside the realm of intuition and putting it on a firm mathematical or 
objective basis Moreover, often the statistical analysis will tell the cryptanalyst when he has 
arranged oi i oarranged his text properly, that is, when he is approachmg or has reached mono- 
alphabeticity m his efforts to reduce polyalphabetic text to its simplest terms However, in 
order to preserve continuity of thought it is deemed inadvisable to inject these statistical con¬ 
siderations at this place m the text proper, they have been incorporated in Appendix 2 hereof 
The student is advised to study the Appendix very carefully after he has fimshed reading this 
section of the text 

g At this point it will merely be indicated that if a cryptanalyst were to have at hand only 
the cryptogram of Fig 1, with the repetitions underlined as below, a statistical study of the 

‘ It IS to be understood, of course, that cipher alphabets with single equivalents are meant in this case 
2 The frequency with which this condition may be expected to occur can be definitely calculated A dis¬ 
cussion of this point falls beyond the scope of the present text 
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number and length of the repetitions within the message (Par 5 of Appendix 2) wmiild tell him 
that while some of the digiaphic repetitions may be accidental, the chances that they all are 
accidental aie small In the case of the tctragraphic repetition he would leahze that the 
chances of its being accidental are very small indeed 

A U S Y E S E C P M P_L CCLNXBWCSOXUVD 

B S_C R H T H X I P_ii I ^ I J U S Y E E G U R D P J 

C AY BOX OFPJW JEMGP XVEUE L_E J_Y Q 

D M U S C X J_yMSG LL_ETA L_EDE_C GBMFI ^ 

h A consideration of the facts thcrefoie leads to but one conclusion, viz, that the repetitions 
exhibited by the cryptogram under investigation aie not accidental but are causal in their origin, ! 

and the cause is m this case not diffic ult to find repetitions m the plain text were actually en- |l 

ciphered by identical alphabets In order for this to occur, it was necessary that the tetragraph jf 

USYE, foi example, fall both times m exactly the same relative position with respect to the key 
Note, for example, that UYSE m Fig 1 repicscuts in both cases the plain-text polygraph THEA | 

The first time it occurred it fell in positions 1-2-3-4 with respect to the key, the second time it ] 

occurred it happened to fall in the ver3' same relative positions, although it might just as well 1 

have happened to fall m any of the other three possible lelative positions with respect to the l| 

key, VIZ, 2-3-4-1, 3-4-1-2, or 4-1-2 3 | 

^ Lest the student be nusled, howev'cr, a few more words are necessary on tlus subject || 

In the precedmg subparagraph the word “happened” w'as used, this wmrd correctly expresses i| 

the idea in mind, because the insertion or deletion of a single plain-text letter between the two 1 

occurrences would have thrown the second occurrence one letter forward or backw'ard, respcc- li 

tively, and thus caused the polygraph to be enciphered by a sequence of alphabets such as can » 

no longer produce the cipher polygraph USYE from the plain-text polygraph THEA On the 
other hand, the insertion or deletion of this one letter might bring the letters of some other 
polygraph into similar columns so that some other repetition would be exhibited m case the 
USYE repetition had thus been suppressed 

j The encipherment of similar letters by similar cipher alphabets is therefore the cause of 
the production of repetitions m the cipher text in the case of repcatmg-key ciphers What 
principles can be derived from this fact, and how can they be employed m the solution of crypto¬ 
grams of this type? 

t If a count IS made of the number of letters from and mclucling the first USYE to, but not 
including, the second occurrence of USYE, a total of 40 letters is found to intervene between the 
two occurrences This number, 40, must, of i ourse, be an exact multiple of the length of the key 
Having the j)lain-text before one, it is easily seen that it is the 10th multiple, that is, the 4-letter 
key has repeated itself 10 times between the first and the second occurrence of USYE It follows, 
therefore, that if the length of the key’ weie not known, the number 40 could safely bo taken to 
be an exact multiple of the length of the key, in other words, one of iliejactors of the number 
40 would be equal to the length of the key The word “safely” is used m the preceding sentence 
to mean that the interval 40 applies to a repetition of 4 letters and it has been shown that the 
chances that this repetition is accidental are small The factors of 40 are 2, 4, 5, 8, 10, and 20 
So far as this smgle repetition of USYE is concerned, if the length of the key w ere not knowm, aU 
that could be said about the latter would be that it is equal to one of these factors The repeti¬ 
tion by itseK gives no further mdications How' can the exact factor be selected from among a 
hst of several possible factors? 
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I Let the intervals between all the lepetitions in the cryptogram bo hsted They are as 
follows 


Hpiietition 

Inter%al 

Factors 

1st USYE to 2d USYE.. . .. 

40 

2, 4, 6, 8, 10, 20 

Ibt BC to 2d BC. 

16 

2, 4, 8 

1st CX to 2d CX. 

25 

5 

1st EC to 2d EC. 

88 

2, 4, 11, 22, 44 

1st LE to 2d LE . . . _ . 

16 

2, 4, 8 

2d LE to 3d LE. 

4 

2, 4 

1st LE to 3d LE . 

20 

2, 4, 5, 10 

1st J\ to 2d JY . ’ . . 

8 

2, 4 

1st PL to 2d PL . . . 

24 

2 3, 4, 6, 8 10, 12 

1st SC to 2d SC_ . 

52 

2, 4, 13, 2b 

(1st SY to 2d SY, already included m USYE ) 

(1st US to 2d US, alreadj included in USYE ) 

2d US to 3d US . _ 

36 

2, 3, 4, 6, 9, 18 

(1st JS to 3d US, already included in USYE ) 

(1st YE to 2d YE, already included m USYE ) 



m Arc all these repetitions cawsaZ Iepetitions? It can be shown (Appendix 2, par Ic) that 
the odds against a theory that the UYSE repetition is a.iidental are about 99 to 1 (since the 
probability for its occuirence is 01 ) It can also be shown that the odds against a theory that the 
10 digraphs which occur two or more times are accidental repetitions aic over 4 to 1 (Appendix 
2, par 5c), the odds against a theory that the twm digraphs which occur 3 times are accidental 
repetitions are quite large (Probability is calculated to be about 06 ) The chances are very 
great, therefore, that all or nearly all these repetitions are causal Certainly the chances against 
the two occurrences of the tetragraph UYSE and the three occuirencesof the two different digraphs 
(LE and US) being accidental are quite high, and it is thcrefoie not astonishing that the intervals 
between all the various repetitions, except in one case, contain the factors 2 and 4 

n This means that if the cipher is written out in either 2 columns or 4 columns, all these 
repetitions (except the CX repetition) would fall into the same columns From tins it follows 
that the length of the key is either 2 or 4, the latter, on practical grounds, being more probable 
than the former Doubts concerning the matter of choosing between a 2-letter and a 4-letter 
key will be dissolved when the cipher text is distributed into its component uniliteral frequency 
distributions 

0 The repeated digraph CX in the foregoing message is an accidental repetition, as will be 
apparent by referrmg to Fig 1 Had the message been longer there would have been more 
such accidental repetitions, but, on the other hand, there would be a proportionately greater 
number of causal repetitions This is because the phenomenon of repetition m plain text is 
so all-peivadmg 

p Sometimes it happens that the cryptanalyst quickly notes a repetition of a polygraph of 
four or moie letters, the interval between the first and second occurrences of which has only 
two factois, of which one is a relatively small number, the other a relatively high mcommen- 
surable number lie may therefore assume at once that the length of the key is equal to the 
smaller factor without searching for additional recurrences upon which to corroborate his 
assumption Suppose, for example, that in a relatively short cryptogram the interval betw'een 
the first and second occurrences of a polygraph of five letteis happens to be a number such as 
203, the factors of which are 7 and 29 Evidently the number of alphabets may at once be 


assumed to be 7, unless one is dealing with messages exchanged among correspondents known 
to use long keys In the latter case one could assume the number of alphabets to be 29 

g The foregomg method of determimng the period in a polyalphabetic cipher is commonly 
referred to the literature as “factoring the inteivals betw^een repetitions”, or more often it is 
simply called “factoimg ” Because the latter is an apt term and is brief, it will be employed 
hereafter m this text to designate the process 

10 General remarks on factoring —a The statement made in Par 2 with respect to the 
cyclic phenomena said to be exhibited m cryptograms of the peiiodic type now becomes clear 
The use of a shoit repeating key produces a periodicity of recurrences or repetitions collectively 
termed “cyclic phenomena”, an analysis of which leads to a determination of the length of the 
period or cycle, and this gives the length of the key Only in the case of relatively short crypto¬ 
grams enciphered by a relatively long key docs factoimg fail to lead to the correct determination 
of the number of cipher alphabets in a repeating-key cipher, and of course, the fact that a crypto¬ 
gram contains repetitions whose factors show constancy is in itself an indication and test of its 
periodic nature It also follows that if the cr;yptogram is not a repeatmg-key cipher, then 
factoring will show no delmite results, and conversely the fact that it does not yield definite 
results at once indicates that the cryptogram is not a periodic, repeatmg-key cipher 

b There are two cases m which factoring leads to no definite results One is in the case of 
monoalphabetic substitution ciphers Here recurrences are very plentiful as a rule, and the 
intervals separating these recurrences may be factored, but the factors will show no constancy, 
there will be several factors common to many or most of the recurrences This m itself is an 
indication of a monoalphabetic substitution cipher, if tiie xery fact of the presence of many 
recurrences fails to impress itself upon the inexperienced cryptanalyst ffhe other case in which 
the process of factormg is nonsigmficant mxmlves certain types of nonperiodic, polyalphabetic 
ciphers In certam of these ciphers recuirences of digiaphs, tiigraphs, and even polygraphs 
may be plentiful m a long message, but the intervals between such recurrences bear no defimte 
multiple relation to the length of the key, such as m the case of the true periodic, repeatmg-key 
cipher, m which the alphabets change with successive letters and repeat themselves over and 
over agam 

c Factormg is not the only method of determining the length of the period of a periodic, 
polyalphabetic substitution cipher, although it is by far the most common and easily applied 
At this point it will merely be stated that when the message under study is relatively short in 
comparison with the length of the key, so that there are only a few cycles of cipher text and no 
long repetitions affording a basis for factormg, there are several other methods available 
However, it being deemed inadvisable to inteiject the data concerning those other methods 
at this point, they will be explained subsequently It is desirable at this juncture merely to 
mdicate that methods other than factormg do exist and are used m practical work 

d Fundamentally, the factoring process is merely a more or less simple mathematical method 
of studying the phenomena of periodicity in cryptograms It will usually enable the crypt¬ 
analyst to asceitam definitely whether or not a given cryptogram is peiiodic in nature, and if 
so, the length of the period, stated in terms of the cryptographic unit iniohed By the latter 
statement is meant that the factonng piccess may be applied not only in analyzing the periodicity 
manifested by cryptograms m which the plain-tc^t units subjected to cryptographic treatment 
are monographic in natuie (i e are single letters) but also in studying the peiiodicity exhibited 
by those occasional ciyptogiams wheiem the plaiii-text units aie aigraphic, trigruphic, or 
7i-graphic in character The student should bc<ir this point m mind when he comes to the study 
of substitution systems of the latter sort Ilow^ever, the jnesent text will deal solely wuth cases 
of the former type, wheiem the plain-text units subjected to ciyptographic treatment are single 
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11 Second step distributing the cipher text into the component monoalphabets —a 
After the number of cipher alphabets involved in the cryptogram has been asceitamed, the next 
step IS to rewrite the message in groups corresponding to the length of the key, or in columnar 
fashion, whichever is moie convenient, and this automatically divides up the text so that the 
letters belonging to the same cipher alphabet occupy similar positions in the groups, or, if the 
columnar method is used, fall m the same colunxii The letters are thus allocated or distributed 
into the respective cipher alphabets to which they belong This reduces the polyalphabetic 
text to monoalphabetic terms 

b Then separate umliteral frequency distiibutions for the thus isolated mdividual alphabets 
are compiled For example, in the case of the cipher on page 13,naving determined that four 
alphabets are involved, and having rewritten the message m four columns, a frequency distribu¬ 
tion IS made of the letters m Column 1, another is made of the letters in Column 2, and so on for 
the rest of the columns Each oj the resulhng disUibuhons therefore a rnonoal'phabeUc frequency 
distribution If these distiibutions do not give the characteristic irregular crest and trough 
appearance of monoalphabetic frequency distributions, then the analysis which led to the 
hypothesis as regards the number of alphabets involved is fallacious In fact, the appearance of 
these individual distributions may be considered to be an index of the correctness of the factoring 
process, for theoretically, and practically, the individual distiibutions constructed upon the 
correct hypothesis will tend to conform more closely to the irregulai crest and trough appearacne 
of a monoalphabetic fiequency distribution than will the graphic tables constructed upon an 
incorrect hypothesis These individual distributions may also be tested for monoalphabeticity 
by statistical methods 

12. Third step. solving the monoalphabetic distributions —The difficulty experienced in 
analyzing the individual or isolated fiequency distiibutions depends iiiostly upon tlie type of 
cipher alpnabets that is used It is apparent that mixed alphabets may be used just as easily as 
standard alphabets, and, of course, the cipher letters themselves give no indication as to which 
IS the case However, just as it was found that in the case of monoalphabetic substitution ciphers, 
a unihteral frequency distiibution gives clear indications as to v/hether the cipher alphabet is a 
standard or a mixed alphabet, by the relative positions and cxteneions of the crests and troughs 
m the table, so it is found that in the case of repeatmg-key ciphers, unihteral frequency distribu¬ 
tions for the isolated or individual alphabets wall also give deal mdications as to w'hether these 
alphabets are standard alphabets or mixed alphabets Oidy one or two such frequency distribu¬ 
tions aie necessary for this determination, if they appear to be standard alphabets, siimlar distri¬ 
butions can be made for the rest of the alphabets, but if they appear to be mixed alphabets, then 
it IS best to compile tnliteral frequency distributions for all the alphabets The analysis of the 
values of the cipliei letters in each table proceeds along the same lines as in the case of monoalpha¬ 
betic ciphers The analysis is more difficult only because of the reduced size of the tables, but 
if the message be very long, then each frequency distribution will contain a sufficient number of 
elements to enable a speedy solution to be achieved 


Section IV 

BEPEATING-KEY SYSTEMS WITH STANDARD CIPHER ALPHABETS 

Solution by applying principles of frequency., ---. . 

Solution by completing the plain-component sequence - - 

Solution by the “probable-word method”— - - - -. 

13 Solution by applying principles of frequency — 
let the followmg cryptogram be studied 

Message 


In the light of the foregoing principles, 



J A M K I 

Z 

Y M W M 

J M I G X 

N F_M L 

Z H B H R 

A 

Y M Z M 

I L V M E 

J K U T 

Q UKH Q 

L 

H V R M 

J A Z N G 

~G Z V X 

P Z J N V 

_c 

H U A S 

H K QGK 

I P L W 

_G U M T V 

D 

P T E J 

E C M Y S 

Q Y B A 

P 0 E X W 

P 

V N Y E 

E Y X E E 

U D P X 

Z I I V 0 

S 

PTE G 

K U B B R 

Q. L L X 

N L L L E 

P 

T I K W 

D J Z X I 

GOTO 

K F_M W F 

N 

P L Z I 

0 V V F M 

Z K T X 

A A E X I 

J 

L U F M 

P Z J N V 

C A I G 

N V I W E_ 

J 

_K Z A S 

ZLA F M 

H S 


A search lor ropeftions discloses the followiog short list with *6 mterva^ 

10 omitted (for previous expeneuce may lead to the conclusion that it is unlikely that the 
e^tptoglrinvolves more than 10 alphabets, showmg the number of reeuirence, which it does) 


Location Interval 


LUFMPZJNVC 

J2XIG 

EJK 

PTE 

QGK 

UKH 

ZLA 

AS 

EJ 


JL. I 
D3, 1 
B4, 1 
A5, 1 
A5, . 


2, 4, 5, 8, 10 
2, 3, 5, 6, 9, 10 


2, 3, 4, 6 
2, 4, 5, 10 
2 , 3, 5, 6, 10 

2, 3, 4, 5, 6, 10 

3, 5 
5 

2, 5 

3, 5, 7 
3, 5, 9 

2, 4, 5, 10 


(17) 















E==s=EE!£i'==-'= 

Alphabet 1 

ABCDEFGHIjkLM^O^QRSTUVWXyi 

test Ac core ingly a similai distribution is mede for Alphabet 2 


ABCDEFGHIjkLMN0PQRSTUV7/XYZ 

d There is every indication of a direct standird aloh.p.et with H -4 T i n . 

b.,t.or. I,c m,ulo for the l,„t three elphebet. They do t f, Jim" " 


ABCDEFGHIJKLMNOPQRSTLJVWXYZ 


ABCDEFGHIJKLMNOPQRSTUVWXYZ 

Alphabet 1. Ap—W, 

Alphabet 2_.Ap=Ho 

Alphabet 3_ Ap=Ip 

Alphabet 4_ Ap=Te 

Alphabet 5. Ap=Ec 

tbp given by the successive eciuivalcnts of Ap WHITE The real nroof of 

Plain.,.... A_B CDEFG HIJ KLMNOPORSTirvwYV ‘7 

- H ^ T ^ ° Q R I T U -f 

Qoher o.■■■' ?^;;^^^'’^°PQ^^STUVWXYZABCDEFG 

?.- ^'^^LMNOPQRSTUVWXYZABCDEFGH 

4- TUVWXYZABCDEFGHIJKLMNOPQRS 

t E^^ghijklmnopqrstuvwxyzabcd 
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g Applying these values to the first few groups of our message, the following is found 

12346 12345 12346 12346 12346 

Cipher . AUKHY JAMKI ZYMWM JMIGX NFMLX 

Plain. ENCOU NTERE DREDI NFANT RYEST 

h Intelhgiole text at once results, and the solution can now be completed veiy quickly 
The complete message is as follows 

ENCOUNTERED RED INFANTRY ESTIMATED AT ONE REGIMENT AND MACHINE GUN COM¬ 
PANY IN TRUCKS NEAR EMMITSBURG AM HOLDING MIDDLE CREEK NEAR HILL 543 SOUTH¬ 
WEST OF FAIRPLAY WHEN FORCED BACK WILL CONTINUE DELAYING REDS AT MARSH 
CREEK HAVE DESTROYED BRIDGES ON MIDDLE CREEK BETWEEN EMMITSBURG-TANEYTOWN 
ROAD AND RHODES MILL 

t In the foregoing example (winch is typical of the system erroneously attributed, m cryp¬ 
tographic literature, to the French cryptogiaphor Vigen^re, although to do him justice, he 
made no claim of having “invented” it), direct standard alphabets were used, but it is obvious 
that reversed standard alphabets may be used and the solution accomplished m the same 
manner In fact, the now obsolete cipher disk used by the United States Army for a number 
of years yields exa-'fly this type of cipher, cvliich is also known in the literature as the Beaufort 
Cipher, and by other names In fitting the isolated frequency distributions to the normal, the 
direction of “reading” the crests and troughs is merely reversed 

14 Solution by completing the plain-component sequence —a There is another method 
of solving this type of cipher, which is worthwhile explammg, because the underlying principles 
will be found useful m many cases It is a modification of the method of solution by completing 
the plain-component sequence, alieady explained m Military Cryptanalysis, Part 1 

b After all, the mdividual alphabets of a cipher such as the one just solved are merely 
direct standard alphabets It has been seen that monoalphabetic cipliers m which standard 
cipher alphabets are employed may be solved almost mechanically by completing the plain- 
component sequence The plain text reappears on only one generatrix and this generatrix is the 
same for the whole message It is easy to pick this generatrix out of all the other generatrices 
because it is the only one which yields intcHigible text Is it not apparent that if the same process 
IS applied to the cipher letters of the individual alphabets of the cipher just sol red that the plain¬ 
text equivalents of these letters must all reappear on one and the same generatrix? But how 
will the generatrix wdiich actually contains the plain-text letters be distinguishable from the 
other generatrices, since these plain-text letters are not consecutive letters in the plain text but 
only letters separated from one another by a constant interval? The answer is simple The plain¬ 
text generatrix should be distinguishable from the others because it will show more and a better 
assortment of high-frequency letters, and can thus be selected by the eye from the whole set of genera¬ 
trices If this IS done with all the alphabets in the cryptogram, it will merely be necessary to 
assemble the letters of the thus selected generatrices m proper order, and the result sould be 
consecutive letters forming mtelligible text 

c An example will serve to make the process clear Let the same message be used as before 
Factoring showed that it involves five alphabets Let the first ten cipher letters in each alphabet 
be set down m a horizontal line and let the normal alphabet sequences be completed Thus 
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Alphabet i Alphabet 2 

1 AJZJNEZAIJ UAYMFTHYT.K 


2 BKAKOFABJK 

3 CLBLPGBCKL 

4 DMCMQHCDLM 

5 ENDNRIDEMN 

6 FOEOSJEFNO 

7 GPFPTKFGOP 

8 HQGQULGHPQ 

9 IRHRVMHIQR 

10 JSISWNIJRS 

11 KTJTXOJKST 

12 LUKUYPKLTU 

13 MVLVZQLMUV 

14 NWMWARMNVW 

15 OXNXBSNOWX 

16 PYO'iCTOPXY 

17 QZPZDUPQYZ 

18 RAQAEVQRZA 

19 SBRBF7/RSAB 

20 TCSCGXSTBC 

21 UDTDHYTUCD 

22 VEUEIZUVDE 

23 WFVFJAVWEF 

24 XGWGKBWXFG 

25 YHXHLCXYGH 

26 ZIYIMDYZHI 


VBZNGUIZML 

WCAOHVJAN'lfl 

XDBPIWKBON 

YECQJXLCPO 

ZFDRKYMDQP 

AGESLZNERQ 

BHFTMAOFSR 

CIGUNBPGTB 

DJHVOCQHUT 

EKIViPDRIVU 

FLJXQESJWV 

GMKYRFTKXW 

HNLZSGJLYX 

IOMATHVi\'.ZY 

JPNBUIWN4Z 

KQOCVJXOEA 

LRPDWKYPCB 

MSQEXLZQDC 

NTRFY I VARED 

OUSGZNBSFE 

PVTHAOCTGF 

QWUIBPDUHG 

RXVJCQEVIH 

SYWKDRF7/JI 

TZXLESGXKJ 


Alphabets Alphabet 4 ALPHtBKTS 

KMMIMIBM7 U HKWGLM HZMT YJMXXIRMEG 


LNNJNJGNWV 

MOOKOKDOXW 

NPPLPLEPYX 

OQQMQMFQZY 

PRRNRNGRAZ 

QSSOSOHSBA 

RTTPTPITCB 

SUUQUQJUDC 

TVVRVRK\/FD 

UWWSWSLftFE 

VXXTXTMXGF 

WYYUYU4YHG 

XZZVZVOZIH 

YAAhAWPAJl 

ZBBXBXQBKJ 

ACCYCYRCLK 

BDDZDZSDML 

CEEASATF NM 

DFFBFBUrON 

EGGCGCVGPO 

FHHDHDWHOP 

GIIEIEXIRQ 

KJJFJFYJSR 

IKXGKGZKTS 

JLLHLHALUT 


ILXHMNIANU 

JMYINOJBOV 

KNZJOPKCPW 

LOAKPQLDQX 

MPBLQRMERY 

NQCMRSNFSZ 

OPDNST OGTA 

PSEOTUPHUB 

QTFPUVQIVC 

RUGQVIIFRJWD 

SVHRWXSKXE 

TWISXYTLYF 

UXJTYZUMZG 

VYKUZAVNAH 

WZLVABWOBI 

XAMffBCXPCJ 

YBMXCDYQDK 

ZCOYDEZREL 

ADPZEFASFM 

BEQAFGBTGN 

CFRCGHCUHO 

DGSCHIDVIP 

EHTDIJEWJQ 

FIUEJKFXKR 

GJVFKLGYLS 


ZJNYYJSNFH 

AKCZZKTOGI 

BLPAAL,UPHJ 

CMQBBMVOIK 

DNRCCNWRJL 

EOSDDOXSKM 

FPTEEPYTLN 

GQUFFQZUMO 

HRVGGRAVNP 

ISWHHSBWOQ 

JTXIITCXPR 

KUYJJUDYQS 

LVZKKVEZRT 

MWALLWFASU 

NXBMTJXGBTV 

OYCNNYHCUW 

PZDOOZIDVX 

QAEPPAJEWY 

RBFQQBKFXZ 

SCGRRCLGYA 

TDKSSDMHZB 

UEITTENIAC 

VFJLUFOJBD 

WGKVVGPKCE 

XHLWWHQLDF 


d If the high-frequency generatrices undeihned in Figure 3 are selected and their letters 
aie juxtaposed m columns the consecutive letters of intelligible plain text immediately present 


themselves Thus “ .. *' ^ 

i For Alphabet 1, generatiix 5_ ENDNRIDEMN 

For Alphabet 2, geneiatnx 20- NTRFYMARED 

For Alphabet 3, generatiix 19_ CEEAEATENM 

For Alphabet 4, generatrix 8. ORDNSTOGTA 

For Alphabet 5, generatrix 23_ UEITTENIAC 


1 2 3 4 5 
'E N C 0 U 
N T E R E 
D R E D I 
N F A N T 

Columnar juxtaposition of lettersjR Y E S T 

from selected generatrices_ I M A T E 

D A T 0 N 
E R E G I 
M E N T A 
.N D M A C 
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Flam text ENCOUNTERED RED INFANTRY ESTIMATED AT ONE 
REGIMENT AND MAC 

e Solution by this method can thus be achieved without the compilation of any frequency 
tables whatever and is verj’’ quickly attained The inexperienced cryptanalyst may have diffi¬ 
culty at first in selectmg the generatrices which contain the most and the Ijest assortment of 
high-frequency letters, but with mcreased practice, a high degree of prof ciency is attained 
After all it is only a matter of experiment, trial, and error to select and assemble the proper 
generatnees so as to produce intelligible text 

y If the letters on the shdmg stnps were accompanied by numbers representing their relative 
frequencies in plain text, and these numbers were added across each generatiix, then that gen¬ 
eratrix with the highest total frequency would theoretically always be the plain-text generatrix 
Practically it will be among the generatrices which show the first three or four greatest totals 
Thus, an entirely mathematical solution for this type of cipher may be applied 

g If the cipher alphabets are reversed standard alphabets, it is only necessary to convert 
the cipher letters of each isolated alphabet into their normal, plain-component equivalents and 
then proceed as m the case of direct standard alphabets 

h It has been seen how the key w ord may be discovered in this tj'^pe of cryptogram Usually 
the key is made up of those letters m the successive alphabets whose equivalents are Ap but other 
conventions are of course possible Sometimes a key number is used, such as 8-4-7-1-12, 
which means merely that Ap is represented by the eighth letter from A (in the normal alphabet) 
m the first cipher alphabet, by the fourth letter from A in the second cipher alphabet, and so on 
This modification is knowui m the hterature as the Gronsfeld ciphei How ever, the method of 
solution as illustrated above, being independent of the nature of the key, is the same as befoie 
15 Solution by the “probable-word method ”—a The common use of key words in cryp¬ 
tograms such as the foregoing makes j)ossible a method of solution that is simple and can be used 
where the more detailed method of analysis using fiequency distributions or by completmg the 
plain-component sequence is of no avail In the case of a very short message which may show 
no recurrences and give no indications as to the number of alphabets involved, this modified 
method wiU be found most useful 

b Briefly, the method consists m assuming the piesence of a probable word in the message, 
and refemng to the alphabets to find the key letter’s apphcable when this hypothetical W'ord is 
assumed to be present in various positions in the cipher text If the assumed word happens to 
be correct, and is placed m the correct position in the message, the key letters produced by 
refernng to the alphabets will yield the key word In the following example it is assumed that 
reversed standard alphabets are known to be used by the enemy 

Message 

MDSTJ LQCXC KZASA NYYKO LP 

c Extraneous circumstances lead to the assumption of the presence of the word AMMU¬ 
NITION One may assume that this word begins the message Using sliding normal compo¬ 
nents, one reversed, the other direct, the key letters are ascertained by notmg what the successive 
equivalents of Ap are Thus 


Cipher_ MDSTJLQCXC 

Flam text. AMMUNITION 

“Key”.. MPENWTJKLP 
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The key does not spell any intelligible word One therefore shifts the assumed word one letter 
forward and another tnal is made 

Cipher_ DSTJLQCXCK 

Plain text.... AMMUNITION 

“Key”_ DEFDYYVFQX 

This also jields no intelligible key word One continues to shift the assumed word forward 

one space at a time until the following point is reached 

Cipher_ LQCXCKZASA 

Plain text_ AMMUNITION 

“Key”.. LCORPSSIGN 

The key now becomes evident It is a cyclic permutation of SIGNAL CORPS It should be 
clear that smcc the key word or key phrase repeats itself during the encipherment of such a 
message, the plain-text word upon whose assi med presence in the message this test is bemg 
based may begm to be enciphered at any point in the kev, and contmue over into its next repeti¬ 
tion if It IS longer than the key When this is the case it is merely necessary to shift the latter 
part of the sequence of key letters to the first part, as in the case noted LCORPSSIGN is trans¬ 
posed into SIGN LCORPS, and thus SIGNAL CORPS 

d It will be seen m the foregoing method of solution that the length of the key is of no 
particular mterest or < onsequonco in the stops taken in eflecting the solution The determina¬ 
tion of the length and elements of the key comes after the solution rather than before it In this 
case the length of the penod is seen to bo eleven, correspondmg to the length of the key (SIGNAL 
CORPS) 

e The foregoing method is one of the other methods of determining the length of the key 
(besides factoring), referred to in Par 10c 

y If the assumption of reversed standard alphabets yields no good results, then direct 
standard alphabets are assumed and the test made exactly in the same manner As will be 
shown subsequently, the method can also be used as a last resort w'hen mixed alphabets are 
employed 

ff When the assumed word is longer than the key, the sequence of recovered key letters wdl 
show a periodicity equal to the length of the key, that is, after a certam number of letters the 
sequence of key letters will repeat This phenomenon would be most useful m the case of keys 
that are not intelligible words but are composed of random letters or figures Of course, if such 
a key is longer than the assumed word, this method is of no avail 

A This method of solution by searching for a word is contingent upon the following cir¬ 
cumstances 

(1) That the word whose presence is assumed actually occurs m the message, is properly 
spelled, and correctly enciphered 

(2) That the sliding components (or equivalent cipher disks or squares) employed m the 
search for the assumed word are actually the ones which weie employed in the encipherment, 
or are sue h as to give identical results as the ones wluch were actually used 

(3) lliat the pair of cncipheimg equations used in the test is actually the pan which was 
employed m the encipherment, or if a cipher square is used m the test, the method of finding 
eqmvalents gives results that correspond with those actually obtained m the encipherment 
(See par 9 ) 


^ The foregomg appears to be quite an array of contingencies and the student may think 
that on this account the method will often fail But examining these contingencies one by one, 
it will be seen that successful application of the method may not be at all rare—after the solution 
of some messages has disclosed what sort of paraphernalia and methods of employing them are 
favored by the enemy From the foregomg remark it is to be inferred that the probable-word 
method has its greatest usefulness not m an mitial solution of a system, but only aftei successful 
study of enemy communications by more difiicult processes of analysis has told its story to the 
alert cryptanalyst Although it is commonly attributed to Bazenes, the French cryptanalyst 
of 1900, the probable-word method is very old m cryptanalysis and goes back several centuries 
Its usefulness m practical work may best be indicated by quoting from a competent observer * 

There is another {method] which is to this first method what the geometric method is to analysis in certain 
sciences, and, according to the whims of individuals, certain cryptanalysts prefer one to the other Certain others, 
incapable of getting the answer with one of the methods in the solution of a difiicult problem, conquer it by means 
of the other, with a disconcerting masterly stroke This other method is that of the piobable word We may 
have more or less definite opinions concerning the subject of the cryptogram We may know something about its 
date, and the correspondents, who may have been indiscreet m the subject they have treated On this basis, the 
hjrpothesis is made that a certain word probably appears in the text In certain classes of documents, 

military or diplomatic telegrams, banking and mining affairs, etc , it is not impossible to make very important 
assumptions about the presence of certain words in the text After a cryptanalyst has worked for a long time 
with the wntings of certain correspondents, he gets used to their expressions He gets a whole load of words 
to try out, then the changes of key, and sometunes of system, no longer throw into his wav the difficulties of an 
absolutely new study, which might require the analvtical method 

> Gmerge, M , Co?/rs lie Cryptographte, Pans, 1925, p 30 
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REPEATING-KEY SYSTEMS WITH MIXED CIPHER ALPHABETS, I 

Reason for the use of mixed alphabets. _ Paragraph 

Interrelated mixed alphabets .... ’ . . 

Principles of direct symmetry of position .. - - . - . 17 

Initial steps in the solution of a typical example .. _ . .' i o 

Application of principles of direct symmetry of position... 

Subsequent steps in solution. . ^ 

Solution of subsequent messages encipheied by same cipher component'''' . « 

Summation of relatii e frequencies as an aid to the selection of the correct generatric'^'.. 24 

Solution by the probable-word method ... . 

Solution when plain component is mixed, the ciphe'r"c'o'mponent,’the"nonii'al] '!!.'!!" 26 
16. Reason for the use of mixed alphabets -o It has been seen in the examples considered 
thus far that the use of several alphabets m the same message does not greatly complicate the 
analysis of such a cryptogram There are three reasons why tins is so Firstly, only relatively 
few alphabets were employed, secondly, these alphabets were employed in a penodio or repeatmg 
ma^er, giving rise to cyclic phenomena m the cryptogiam, by means of which the number of 
alphabets could be determined, and, thirdlv, the cipher alphabets were kvovm alphabets, by 
which 18 meant merely that the sequences of letters in both components of the cipher alphabets 
were Known sequences 

j I * monoalphabetic cijihers it ,«as found that the use of a mixed alphabet 

delayed the solution to a consideralile dcgioe, and it will now be seen that the use of mixed alpha- 
bets m polyalphabetic ciphers renders the analysis much more difficult than the use of standard 
alphabets, but the solution is still fairly easy to achieve 

* 1 . alphabets - a It was stated in Par 6 that the method of producing 

the ^ed aljihabets in a pol>alphabetic ciphei often affords clues which aie of great assistance 
m the analysis of the cipher alphabets This is so, of couisc, only when the cipher alphabets 
are mterrelated secondary alphabets produced by sliding components or their equivalents 
Reference is now made to the classification set forth m Par 6, m connection with the types of 
alphabets which may be employed m polyalphabetic substitution It w dl be seen that thus far 
only Cases A (1) and (2) haxe been treated Case B (1) will now be discussed 

b Here one of the components, the plam component, is the normal sequence, while the 
cipher component is a mixed sequence, the various juxtapositions of the two components yieldmg 
mixed alphabets The mixed component may be a systematically-mixed or a random-muxed 
sequence If the 25 successive displacements of the mixed component are recorded m separate 
Imes, a symmetncal cipher square such as that shown in Fig 5 results therefrom It is identical 
m form with the square table shown on p 7, labeled Table I-A 
(24) 
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R 

T 

H 

B 

C 

D 

F 

G 

I 

J 

K 

M 

P 

Q 

u 

X 

Y 

Z L 

E 

A V 

N 

W 

0 

R 

T 

H 

B 

C 

D 

F 

G 

I 

J 

K 

M 

P 

Q 

S 

X 

Y 

Z 

L 

E 

A 

V 

N 

W 

0 

R 

T 

H 

B 

C 

D 

F 

G 

I 

J 

K 

M 

P 

Q 

S 

U 

Y 

Z 

L 

E 

A 

V 

N 

W 

0 

R 

T 

H 

B 

C 

D 

F 

G 

I 

J 

K 

M 

P 

Q 

S 

U 

X 

Z 

L 

E 

A 

V 

N 

W 

0 

R 

T 

H 

B 

C 

D 

F 

G 

I 

J 

K 

M 

P 

Q 

S 

U 

X 

Y 




c Such a cipher square may be used in exactly the same maimer as the Vigen4re square 
With the key word BLUE and conforming to the normal encipheiing equations (0x/3=0i/i, 0p/i= 
0e/j), the following Imes of the square would be used 

ABCDEFGHIJKLMNOPQRSTUVffXYZ 

BCDFGIJKMPQSUXYZLEAVNWORTH 

LEAVNWORTHBCDFGIJKMPQSUXYZ 

UXYZLEAVNWORTHBCDFGIJKMPQS 

EAVNWORTHBCDFGIJKMPQSUXYZL 

Fiqubil es 


These lines would, of course, yield the following cipher alphabets 

Plain. ABCDEFGHIJKLMNOPQRSTUVWXYZ 

' ’ Cipher..... BCDFGIJKMPQSUXYZLEAVNWORTH 

, . Plain_ ABCDEFGHIJKLMNOPQRSTUVWXYZ 

^ ^ Cipher._ LEAVNWORTHBCDFGIJKMPQSUXYZ 

, . Plam. ABCDEFGHIJKLMNOPQRSTUVWXYZ 

Cipher.- UXYZLEAVNWORTHBCDFGIJKMPQS 

, . Plam..... ABCDEFGHIJKLMNOPQRSTUVWXYZ 

^ ' Cipher... EAVNWORTHBCDFGIJKMPQSUXYZL 

Fiointx tb 


J 
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18 Pnnciples of direct symmetry of position —a It was stated directly above that Fig 5 
IS a symmetiical cipher square, by which is meant that the letters in its successive horizontal 
lines show a symmetry of position ivith respect to one another They constitute, m reahty, one 
and only one sequence or senes of letters, the sequences being merely displaced successively 1, 
2, 3, mtervals The syinmetiy exhibited is obvious and is said to be visible, or dued 
This fact can be used to good advantage, as has alicady been alluded to m par 7j 

h Considei, for example, the pair of letteis Go and Vo m cipher alphabet (1) of Fig 66 The 
letter Vo is the 15th letter to the right of Go In cipher alphabet (2), V, is also the 15th letter to 
the right of G*, as is the case in each of the four cipher alphabets in Fig 66, smee the relative 
positions they occupy are the same in each horizontal Ime m Fig 6a, that is, m each of the suc¬ 
cessive recordmgs of the cipher component as the 1 ttor is slid to the right agamst the plain or 
normal component If, therefore, the relative positions occupied by two letters, ©i and ©j, m 
such a cipher alphabet, Ci, are knovm, and if the position of ©i in another cipher alphabet, Cj, 
belonging to the same senes is known, then ©j may at once be placed into its correct position m C 2 
Suppose, for example, that as the result of an analysis based upon considerations of frequency 
the following values m four cipher alphabets have been tentatively deteimmed 


Plain_ ABCDEFGHIJKLMNOPQRSTUVffXYZ 

Cipher.. G Y V 

Plain. ABCDEFGHIJKLMNOPQRSTUVWXYZ 

Cipher.. N G P 

Plain. ABCDEFGHIJKLMNOPQRSTUVWXYZ 

Cipher._ L B I 

, . Plam. ABCDEFGHIJKLMNOPQRSTUVWXYZ 

^ ^ Cipher. W IQ 

Fiouri 7a 


c The cipher components of these four secondary alphabets may, for con\enience, be assem¬ 
bled mto a cellular structure, hereinaftei called a sequence reconstruction skeleton, as shown in 
Fig 76 Regardmg the top line of the reconstruction skeleton m Fig 76 as being common to all 
four secondary cipher alphabets listed in Fig 7o, the successiv e lines of the reconstruction skeleton 
may now be termed cipher alphabets, and may be referred to by the numbers at the left 


Plain 

A 

B 

C 


E 

F 

G 

H 

I 

J 

K 

L 

M 

N 

0 

P 

Q 

R 

S 

T 

u 

V 

w 

X 

Y 

Z 

Cipher 

f1 





G 










Y 





V 







. . 





N 





- 

- 

- 



G 





P 







Is 





L 







B 





I, 








14 

□ 




W 










J\ 





Q 
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d The letter G is common to Alphabets 1 and 2 In Alphabet 2 it is noted that N occupies 
the 10th position to the left of G, and the letter P occupies the 5th position to the nght of G 
One ma:y theiefore place these letters, N and P, 111 their proper positions m Alpliabet 1, the letter N 
being placed 10 letters before G, and the letter P, 5 letters after G Thus 


A|B|C 

D 

E F G 

H 

I 



L 

M 

N|0 

p 

Q 

R|S|T 

ulv 

w 

X 

Y 

1 

. rn 

11 

"Grri 



P 

u 





“1 

1 lv| 

n| 

1 

1 
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Thus, the values of two new letters m Alphabet 1, viz. Pc-Jp, and No=Up have been automati¬ 
cally detemuned, these values were obtained without any analysis based upon i\\& frequency of 
Pc and Nc Likewise, m Alphabet 2, the letters Y and V may be inserted in these positions 



A 

B 

c 1 

d|e|f 

G 

H 

I 

j' 

K 

L 

M 

|N 

0 

p 


_R]£|T|U|^|_^|_X 

Y|Z 





vInI 

r 


r 

— 

— 



L 

Ig; 


L 

1 IpM 1 1 

|v| 


This gives the new values Vc=Dp and Yc=Yp m Alphabet 2 Alphabets 3 and 4 have a common 
letter I, which permits of the placement of Q and W m Alphabet 3, and of B and L in Alphabet 4 
e The new values thus found are ol coi'ise immediately inserted thioughout tlu' cij’pto- 
gram, thus leadmg to the assumption of further values in the cipher text This process, viz, the 
reconstruction of the primary components, by the application of the principles of direct symmetry 
of position to the cells of the reconstruction skeleton, thus facilitates and hestens solution 

f It must be cleanly understood that before the pnnciples of direct sxmmetry ol jiosition 
can be apphed in cases such as the foregoing, it is necessary that the plain component be a known 
sequence Whether it is the normal sequence or not is mimateiial, so long as the sequence is 
known Obviously, if the sequence is unknown, symmetry, even if present, cannot be detected 
by the cryptanalyst because he has no base upon which to try out his assumptions foi 
symmetiy In other words, direct symmetry of position is manifested in the illustrative 
example because the plam component is a known sequence, and not because it is the 
normal alphabet The significance of this point will become apparent later on in connection 
with the problem discussed in Par 266 

19 Triitinl steps in the solution of a typical example —a In the light of the foregoing pnn¬ 
ciples let a typical message now be studied 


Message 

1 2 3 4 5 


A 

0 W B R I 

V W Y C A 

I S P J L 

R B Z E Y 

Q W Y E U 

B 

L W M G W 

I C J C I 

M T Z E I 

M I B K N 

0 W B R I 

C 

V W Y I G 

B W N B Q 

Q C G Q H 

I W J K A 

_G E G X N 

D 

I D M R U 

V E Z Y G 

Q I G V N 

C T G Y 0 

B P D B L 

E 

V C G X G 

B K Z Z G 

_I V X C U 

N T Z A 0 

B W F E Q 

F 

Q L F C 0 

M T Y Z T 

C C B Y Q 

0 P D K A 

_G D G I G 

G 

V P W M R 

Q I I E W 

I C G X G 

_B L G Q Q 

V B G R S 

H 

M Y J J Y 

Q V F W Y 

R W N F L 

G X N F W 

M C J K X 

J 

I D D R U 

0 P J Q Q 

Z R H C N 

V W D Y Q 

R D G D G 

K 

B X D B N 

P X F P U 

Y X N F G 

M P J E L 

S A N C D 

L 

S E Z Z G 

_I B E Y U 

K D H C A 

M B J J F 

K I L C J 

M 

MFD Z T 

C T J R D 

M I Y Z Q 

A C J R R 

S B G Z N 

N 

Q Y A H Q 

V E D C Q 

L X N C L 

L V V C S 

Q W B I I 

P 

I V J R N 

W N B R I 

V P J E L 

T A G D N 

I R G Q P 

Q 

A T Y E W 

C B Y Z T 

E V G Q U 

V P Y H L 

L R Z N Q 

R 

X I N B A 

IK w J a_ 

R D Z Y F 

K W F Z L 

G W F J Q 

S 

Q W J Y Q 

I B W R X 
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b The principal repetitions of three or more letters have been underlmed in the message and 
the factors (up to 20 only) of the mtervals between them are as follows 


QWBRIVWY... .. 45=3, 5, 9, 15 

CGXGB.. 60=2, 3, 4, 5, 6, 10, 12, 15, 20 

PJEL. 95=5, 19 

ZZGI_ 145=5 

BRIV._ 285=3, 5, 15, 19 

BRI. 45=3, 5, 9, 15 

KAG... 75=3, 5, 15 

QRD_ 165=3, 5, 15 

QWB_ 45=3, 5, 9, 15 

QWB. 275=5, 11 

WIG_ 130=2, 5, 10, 13 

XNF. 45=3, 5, 9, 15 

YZT._ 225=3, 5, 15 

ZTC.145=3, 5 


The factor 6 is common to all of these repetitions, and there seems to bo eveiy mdication that 
five alphabets are involved Since the message already appears m groups of five letters, it is 
unnecessary m this case to rewrite it in groups corresponding to the length of the key The 
umliteral frequency distnbution for Alphabet 1 is as follows 

^ i S g 

= ^ S g 5 i g ^ g § S: ^ g _ 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 

PlOUEB 8 

c Attempts to fit this distribution to the normal on the basis of a duect or reversed standard 
alphabet do not give positive results, and it is assumed that mixed alphabets are mvolved 
Individual tnliteral frequency distributions are then compiled and are shown m Fig 9 These 
tables are similar to those made for smgle mixed alphabet ciphers, and are made m the same 
way except that instead of taking the letters one after the other, the letters which belong to the 
sepal ate alphabets now must be assembled in separate tables Foi example, m Alphabet 1, 
the tiigraph (JAC means that A occurs in Alphabet 1, Q, its prefix, occurs m Alphabet 5, nnd C, its 
suffix, occurs m Alphabet 2 All confusion may be avoided by placing numbers indicating the 
alphabets m which they belong above the letters, thus 
Alphabet 1 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 
QC GW NT TV AE AS UD UW IT UT QP NX -W LB LA LA IW NN QI UX QR 

PT OP TC AD WC FI QX II UP YW YW DE IW 

GK TT LX HW FW LV OT NW QD RB UE 

OW WB LW ND LR SY QC QD LC 

GL GV WC GI GP 

GX WC GP QL QB 

XD AB RI NW 

GB JF YV QE 

IV DI NY 

NR SW 

AK QW 

QB 


IP 

UP 





162018—38-3 
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ci 

KG 

KG 

CM 

BI 


Alphabet 5 


CDEFGHIJKL 


CS 

RM 


JK IB Q1 RV CM JR 
YK YQ CM BV 

XB EM FG 

ZI RV ES 

IV II CL 

XB RV ET 

DB HL 

FM ZG 

ZI 


mnopqrstuvwxyz 

KQ YB QA BQ MQ RM ZC EL GI KI EQ 

XI AB EQ RS CQ ZC RV El R- JQ 

VC CM YO ZE CN FM WR 

CV QV RO EC 

BP QZ PY 

ZQ YR YK 

RW ZA QV 

DI HV 

CL 
NX 
JR 
JQ 
YI 


Condensed table of repetition!, 


1- 2-3-4-5-1-2-3 1-2-3 1-2 

Q W B R I V W Y-2 Q W B-3 Q W-5 

V W Y-2 V P-3 

2- 3-4-5-1 V W-3 

C G X G B-2 2-3-4 

C G X-2 2-3 

2- 3-4-1 P J E-2 C G-3 

P J E L-2 W B R-2 C J-3 

X N F-2 P J-3 

3- 4-5-1 W B-3 

B-R-I-V 3-4-5 W F-3 

Z-Z-G-I-2 B R 1-3 W Y-3 

G X G-2 X N-3 

J E L-2 

Y Z T-2 3-4 

Z Z G-2 B R-3 

G Q-4 

4- 5-1 G X-3 

K A G-2 J R-3 

X G B-2 N F-3 

Z G 1-2 Y Z-3 

Z T C-2 

R I V-3 4-5 

R 1-3 

5- 1-2 Y Q-3 

I V W-2 Z T-3 

Q R D-2 

W I C-2 5-1 


G B-4 
I V-3 
Q Q-3 

Figdbi 9 
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d One now proceeds to analyze each alphabet distribution, m an endeavor to establish 
identifications of cipher equivalents First, of couise, attempts should be made to separate 
the vowels from the consonants m each alphabet, usmg the same test as in the case of a single 
mixed-alphabet cipher Theie seems to l)e no doubt about the eqmvalent of Ep m each alphabet 

1 2 3 4 5 

E=Ie,Wo.G,.Cc,Q. 

e The letters of greatest frequency m Alphabet 1 are I, M, Q, V, B, G, L, R, S, and C I, 
has already been assumed to be Ep If Wc and Q.=Ep, then one should he able to distinguish the 

vowels from the consonants among the letters M, Q, V, B, G, L, R, S, and C by examinmg the 

prefixes of W*, and the suffixes of Qo The prefixes and suffixes of these letters, as shown by the 
tnhteral frequency distributions, are these 

2 2 5 6 

Prefixes of (=Ep) Suffixes of Q. (=Ep) 

QGKVRBIL IQRXLVAZO 

^ ^ " 2 5 

j Consider now the letter Me, it docs not occur either as a prefix of Wo, or as a suffix of Qe 

Hence it is most probably a vowel, and on account of its high fiequency it may be assumed to 
be Op On the other hand, note that Qo occurs five times as a piefix of Wo and three times as 
a suffix of Qo It IS therefore a consonant, most probably Rp, for it would give the digraph 
ER (=QQo) as occurring three times and RE (=QWe) as occurring five tunes ^ 

g The letter Vo occurs three times as a prefix of W* and twice as a suffix of Qo It is there¬ 
fore a consonant, and on account of its frequency,^ let it be assumed to be Tp The letter B, 
occurs twice as a prefix of Wo but not as a suffix of Qo Its frequency is only medium, and it is 
probably a consonant In fact, the twice repeated digiaph BW* is once a part of the trigraph 
GBW, and G*, the letter of second highest frequency m Alphabet 5, looks excellent for Tp Might 
not the trigraph GBW be THE? It will be well to keep this possibihty m mmd ^ 

h, The lottei Go occurs only once as a pi efix of Wo and does not occur as a suffix of Qo It may 
be a vowel, but one can not be sure The letter Lo occurs once as a piefix of Wp and once as a 
suffix of Qo It may be considered to be a consonant Ro occurs once as a prefix of W e, and twice 
as a suffix of Qo, and is certamly a consonant Neither the letter S, nor the letter 0, occurs as a 
prefix of Wo or as a suffix of Qo, both would seem to bo vowels, but a study of the prefixes and 
suffixes of these letters lends more weight to the assumption that C, is a vowel than that S, is a 
vowel For all the prefixes of C, vi/, N, T, and W, aio in subsequent analysis of Alphabet 5 classi¬ 
fied as consonants, as are liltewise its suffixes, viz, T, C, and B m Alphabet 2 On the other hand, 
only one piefix, Lp, and one suffix, Bp, of S, are later classified as consonants Since vowels are 
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more often associated with consonants than with other vowels, it would seem that C# is more 
likely to be a vowel than S, At any rate C, is assumed to be a vowel, for the present, leaving S, 
unclassified 

i Going through the same steps with the remaming alphabets, the following results are 
obtamed 


Alphabet 

Consonints 

Vowels 

1 

Q, V. B, L, R. G? 

I. M, C 

2 

B, C. D, T 

W, P, I 

3 

J. N. D, Y, F 

G, Z 

4 

Y. Z. J Q 

C. E7, R’, B7 

6 

G, N. A. I. W, L, T 

Q, U 


20 Apphcation of principles of direct symmetry of position —a The next step is to try 
to deternune a few values m each alphabet In Alphabet 1, from the foregomg analysis, the 
follow mg data are on hand 

Plam- ABCDEFGHIJKLMNOPQRSTUVWXYZ 

Cipher_ C’ I C’ M Q V 


Let the values of Ep already assumed in the remaming alphabets, be set doivn m a reconstruction 
skeleton, as follows 



6 It IS seen that by good fortune the letter Q is common to Alphabets 1 and 5, and the 
letter C is common to Alphabets 1 and 4 If it is assumed that one is dealing wnth a case m which 
a mixed component is shding against the normal component, one can apply the prmciples of 
direct symmetry of position to these alphabets, as outhned m Par 18 For example, one may 
insert the following values m Alphabet 5 



33 


c The process at once gives three definite values Mo=Bp, Vc=Gp, Ip—Rp Let these de¬ 
duced values be substantiated by referring to the frequency distribution Smee B and G are 
normally low or medium frequency letters in plam text, one should find that Mp and Vp, their 
hypothetical equivalents in Alphabet 6, should have low frequencies As a mattei of fact, they 
do not appear m this alphabet, which thus far corroborates the assumption On the other hand, 
since Ip=Rp, if the values derived from symmetry of position are correct, Ip should be of high 
frequency, and reference to the distribution shows that Ip is of high frequency The position of 
C IS doubtful. It belongs either under Np or Vp If the former is correct, then the frequency 

5 

of Cp should be high, for it would equal Np, if the latter is correct, then its frequency should be 

s 

low, for It would equal V. As a matter of fact, Cp does not occur, and it must be concluded 
that It belongs under Vp This in turn settles the value of Cp, for it must now be placed defimtely 
under Ip and removed from beneath Ap 


d The definite placement of C now permits the msertion of new values in Alphabet 4, and 
one now has the foUowmg 



Fiovbi 12 


21 Subsequent steps m solution —c It is high tune that the thus far deduced values, as 
recorded m the reconstruction skeleton, be mserted m the cipher text, for by this time it must seem 
that the analysis has certainly gone too far upon unproved hypotheses The foUowmg results 
are obtamed 

Message 

1 2 3 4 6 

A QWBRI VWYCA ISPJL RBZEY QWYEU 

RE R T E EE RE 

B LWMGW ICJCI MTZEI MIBKN QWBRI 

E E E R 0 R 0 RE R 

C VWYIG BWNBQ QCGQH IWJKA GEGXN 

T E A EERENEE E 
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D 

I D M R U 

V E Z Y G 

Q I G V N 

C T G Y 0 

B P D B L 


E 

T 

R E P 

I E 


E 

V C G X G 

B K Z Z G 

I V X C U 

N T Z A 0 

B W F E Q 


T E 


E E 


E E 

F 

Q L F C 0 

M T Y Z T 

C C B Y Q 

0 P D K A 

G D G I G 


R E 

0 

I E 


E A 

G 

V P W M R 

Q I I E W 

I C G X G 

B L G Q Q 

V B G R S 


T K 

R 

E E 

E N E 

T E 

H 

M Y J J Y 

Q V F W Y 

R W N F L 

G X N F W 

M C J K X 


0 

R 

E 


0 

J 

I D D R U 

0 P J Q Q 

Z R H C N 

V W D Y Q 

R D G D G 


E 

N E 

E 

T E E 

E 

K 

B X D B N 

P X F P U 

Y X N F G 

M P J E L 

S A N C D 





0 

E 

L 

S E Z Z G 

I B E Y U 

K D H C A 

M B J J F 

K I L C J 



E 

E 

0 

E 

M 

M F D Z T 

C T J R D 

M I Y Z Q 

A C J R R 

S B G Z N 


0 

I 

0 E 


E 

N 

Q Y A H Q 

V E D C Q 

L X N C L 

L V V C S 

Q W B I I 


R E 

T EE 

E 

E 

RE A R 

P 

I V J R N 

W N B R I 

V P J E L 

T A G D N 

I R G Q P 


i 

R 

T 

E 

E E N 

Q 

A T Y E W 

C B Y Z T 

E V G Q U 

V P Y H L 

L R Z N Q 



I 

E N 

T 

E 

R 

X I N B A 

I K W J Q 

R D Z Y F 

K W F Z L 

G W F J Q 



E E 


E 

E E 

S 

Q W J Y Q 

I B W R X 





RE E 

E 
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h The combinations given are excellent throughout and no inconsistencies appear Note 
the tngraph Q?/B, which is repeated m the following polygraphs (underlined in the foregomg text) 

123451 5123451 

QWBRIV SQWBIII 

RE RT RE ARE 

c The letter Be is common to both polygraphs, and a httle imagmation will lead to the 

3 

assumption of the value Bo=Pp, yielding the following 

128461 6123451 

QWBRIV SQWBIII 

REPORT PREPARE 


d Note also (m F5) the polygraph I G V P W M, which looks like the word ATTACK The 
AT K 

5 2 

frequency distributions are consulted to see whether the frequencies given for G, and Pe are high 
enough for Tp and Ap, respectively, and also whether the frequency of Wo is good enough for Cp, 
it IS noted that they are excellent Moreover, the digraph GB,, which occurs four tunes, looks 
like TH, thus Bo=Hp Does the insertion of these four new values m our diagram of 

alphabets bring forth any inconsistencies? The insertion of the value Pc=Ap and Be=Hp gives 
no mdications eithei way, since neither letter has yet been located in any of the other alphabets 
The insertion of the value Ge=Tp gives a value common to Alphabets 3 and 5, foi the value 


G,=Ep was assumed long ago Unfortunately an inconsistency is found here The letter I 
has been placed two letters to the left of G m the imxed component, and has given good results 
m Alphabets 1 and 5, if the value We=Cp (obtained above from the assumption of the word 
ATTACK) IS conect, then W, and not I, should be the second letter to the left of G Which shall 

be retamed? There has been so far nothing to estabhsh the value of G„=Ep, tbs value was 
assumed from frequency considerations solely Perhaps it is wrong It certainly behaves like 
a vowel, and one may see what happens when one changes its value to Op The followmg 
placements m the reconstruction skeleton result from the analysis, when only two or three new 
values have been added as a result of the clues afforded by the deductions 


Plain..1 

A 

B 

C 

D 

E 

F 

G 

H 

I 

J 

K 

L 

M 

N 

0 

P 

Q 

R 

S 

T 

U 

V 

W 

X 

Y 

z 

1 

n _ 



s 


I 


G 

B 

c 






M 


P 

Q 

R 

V 

W 







2.. 

P 

Q 

R 

V 

W 








S 


I 


G 

B 

C 






M 


Cipheri 

3_ 

R 

V 

W 








S 


I 


G 

B 

C 






M 


P 

Q 


4_ 

I 


G 

B 

c 


~l 




M 


7 

Q 

R 

V 

W 








S 



,5_ 


M 


P 

— 

Q 

R 

V 

W 








S 


I 


G 

B 

C 
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the produced, and these are inserted throughout the message, yielding 

1 O o . 


A 

B 

C 

D 

E 

F 

G 

H 

J 

K. 

L. 

M. 

N 

P. 

Q 

R. 

S 


1 2 3 

QWBRI VWYCA ISPJL 

REPOR TE E EMY 


I, W M G W 

E W C H 

V W Y I G 

T E AT 

I D M R U 
E WO 

V C G X G 
T S 0 T 

Q L F C 0 
R E 

V P W M R 
T A C K F 

M Y J J Y 
0 

I D D R U 
E 0 

B X D B N 

H D 

S E Z Z G 
C T 

M F D Z T 

0 

Q Y A H Q 
R E 

I V J R N 
E 0 0 

A T Y E W 
H 

X I N B A 

0 D 

Q W J Y Q 

RE E 


I C J C I 
E S E R 

B W N B Q 
HE D E 

V E Z Y G 
T T 

B K Z Z G 
H T 

M T Y Z T 
0 

Q I I E W 
ROM H 

Q V F W Y 
R D Q 

0 P J Q Q 
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37 


22 Completing the solution —a Completion of solution is now a very easy mattoi 
The mixed component is finally found to be the following sequence, based upon the word 
EXHAUSTING 


EXHAUSTINGBCDFJKLMOPQRVWYZ 
and the completely reconstructed skeleton of the cipher square is shown m Fig 136 
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6 Note that the successive equivalents of Ap spell the word APRIL, wluch is the key for the 
message The plam-text message is as follow s 

REPORTED ENEMY HAS RETIRED TO NEWCHESTER ONE TROOP IS REPORTED AT HEN¬ 
DERSON MEETING HOUSE TWO OTHER TROOPS IN ORCHARD AT SOUTHWEST EDGE OF NEW¬ 
CHESTER 2D SQ IS PREPARING TO ATTACK FROM THE SOUTH ONE TROOP OF 3D SQ IS 
ENGAGING HOSTILE TROOP AT NEWCHESTER REST OF 3D SQ IS MOVING TO ATTACK 
NEWCHESTER FROM THE NORTH MOVE YOUR SQ INTO WOODS EAST OF CROSSROAD 539 AND 
BE PREPARED TO SUPPORT ATTACK OF 2D AND 3D SQ DO NOT ADVANCE BEYOND NEWCHESTER 
MESSAGES HERE 

TREER, 

COL 

e The precedmg case is a good example of the value of the prmciples of direct symmetiy 
of position when apphed properly to a cryptogram enciphered by the slidmg of a mixed com¬ 
ponent against the normal The cryptanalyst starts off with only a very Imuted number of 
assumptions and builds up many new values as a result of the placement of the few ongmal 
values m the reconstruction skeleton 

23 Solution of subsequent messages enciphered by the same cipher component —a 
Prehrmnary remarks —^Let it be supposed that the correspondents are usmg the same basic or 
primary component but with different key words for other messages Can the knowledge of 
the sequence of letters m the reconstructed primary component be used to solve the subsequent 
messages? It has been shown that m the case of a monoalphabetic cipher m which a mixed 
alphabet was used, the process of completmg the plam component could be apphed to solve 
subsequent messages m which the same cipher component was used, even though the cipher 
component was set at a different key letter A modification of the procedure used m that case 
can be used m this case, where a plurality of cipher alphabets based upon a shdmg primary 
component is used. 















h The message —^Let it be supposed that the following message passing between the same 
two correspondents as m the preceding message has been intercepted 
Message 


SFDZR 

YRRKX 

MIWLL 

AQRLU 

RQFRT 

IJQKF 

XUWBS 

MDJZK 

MICQC 

UDPTV 

TYRNH 

TRORV 

BQLTI 

QBNPR 

RTUHD 

PTIVE 

RMGQN 

LRATQ 

PLUKR 

KGRZF 

JCMGP 

IHSMR 

GQRFX 

6CABA 

OEMTL 

PCXJJL_ 

RGQSZ 

VB 






c Factoring and conversion into plain component eguivalents —The presence of a repetition 
of a four-letter polygraph whose interval is 21 letters suggests a key word of seven letters There 
are very few other repetitions, and this is to be expected m a short message with a key of such 
length 


S F D Z R Y R 
R K X M I W L 
L A Q R L U R 
Q F R T I J Q 
K F X U W B S 
M D J Z K M I 
C Q C U D P T 
V T Y R N H T 
R 0 R V B Q L 
T I Q B N P R 
R T U H D P T 
I V E R M G Q 
N L R A T Q P 
L U K R K G R 
Z F J C M G P 
I H S M R G Q 
R F X B C A B 
A 0 E M T L P 
C X J M R G Q 
S Z V B 


d Transcription into periods —Let the message 
be written m groups of seven letters, m columnar 
fashion, as shown m Fig 14 The letters in each 
column belong to a smgle alphabet Let the letters 
m each column be converted mto their plain-com¬ 
ponent equivalents by settmg the reconstructed 
cipher component against the normal alphabet at any 
arbitrarily selected pomt, for example, that shown 
below 


F N M Z V Y V 

V P B R H X Q 
Q D U V Q E V 
U N V G H 0 U 
P N B E X K F 
R M 0 Z P R H 
L U L E M T G 
W G Y V I C G 

V S V W K U Q 
G H U K I T V 

V G E C M T G 
H W A V R J U 
I Q V D G U T 
Q E P V P J V 
Z N 0 L R J T 
H C F R V J U 

V N B K L D K 
D S A R G Q T 
L B 0 R V J U 
F Z W K 


Plain... 


.ABCDEFGHIJKLMNOPQRSTUVWXYZ 


Cipher. EXHAUSTINGBCDFJKLMOPQRVWYZ 


The columns of equivalents are now as shown m Pig 16 

e Examination and selection of generatrices —^It has been shown that m the case of a mono- 
alphabetic cipher it was merely necessary to complete the normal alphabet sequence beneath 
the plain-component eqmvalents and the plam text all reappeared on one generatnx It was 
also found that m the case of a multiple-alphabet cipher mvolvmg standard alphabets, the plain¬ 
text eqmvalents of each alphabet reappeared on the same generatnx, and it was necessary only 
to combme the proper generatnees m order to produce the plam text of the message In the 
case at hand both processes are combmed the normal alphabet sequence is contmued beneath 
the letters of each column and then the generatnees are combmed to produce the plam text 
The completely developed generatnx diagrams for the first two columns are as follows (Fig 16) 



FVQUPRLWVGVHIQZHVDLF 

1 GWRVQSMXWHWIJRAIWEMG 

2 HXSWRTNYXIXJKSBJXFNH 

3 lYTXSUOZYJYKLTCKYGOI 

4 JZUYTVPAZKZLMUDLZHPJ 

5 KAVZUWQBALAMNVEMAIQK 

6 LBWAVXRCBMBNOWFNBJRL 

7 MCXBWYSDCNCOPXGOCKSM 

8 NDYCXZTEDODPQYHPDLTN 

9 OEZDYAUFEPEQRZIQEMUO 

10 PFAEZBVGFQFRSAJRFNVP 

11 QGBFACWHGRGSTBKSGOWQ 

12 RHCGBDXIHSHTUCLTHPXR 

13 SIDHCEYJITIUVDMUIQYS 

14 TJEIDFZKJUJVWENVJRZT 

15 UKFJEGALKVKWXFOWKSAU 

16 VLGKFHBMLWLXYGPXLTBV 

17 WMHLGICNMXMYZHQYMUCW 

18 XNIMHJDONYNZAIRZNVDX 

19 YOJNIKEPOZOABJSAOWEY 

20 ZPKOJLFQPAPBCKTBPXFZ 

21 AQLPKMGRQBQCDLUCQYGA 

22 BRMQLNHSRCRDEMVDRZHB 

23 CSNRMOITSDSEFNWESAIC 

24 DTOSNPJUTETFGOXFTBJD 

25 EUPTOQKVUFUGHPYGUCKE 


Ooixnrs 3 

NPDNNMUGSHGWQENCNSBZ 

1 OQEOONVHTIHXRFODOTCA 

2 PRFPPOWIUJIYSGPEPUDB 

3 QSGQQPXJVKJZTHQFQVEC 

4 RTHRRQYKWLKAUIRGRWFD 
6 SUISSRZLXMLBVJSHSXGE 

6 TVJTTSAMYNMCWKTITYHF 

7 UWKUUTBNZONDXLUJUZIG 

8 VXLWUCOAPOEYMVKVAJH 

9 WYMWWVDPBQPFZNWLWBKI 

10 XZNXXWEQCRQGAOXMXCLJ 

11 YAOYYXFRDSRHBPYNYDMK 

12 ZBPZZYGSETSICQZOZENL 

13 ACQAAZHTFUTJDRAPAFOM 

14 BDRBBAIUGVUKESBQBGPN 

15 CESCCBJVHWVLFTCRCHQO 

16 DFTDDCKWIXWMGUDSDIRP 

17 EGUEEDLXJYXNHVETEJSQ 

18 FHVFFEMYKZYOIWFUFKTR 

19 GIWGGFNZLAZPJXGVGLUS 

20 HJXHHGOAMBAQKYHWHMVT 

21 IKYIIHPBNCBRLZIXINWU 

22 JLZJJIQCODCSMAJYJOXV 

23 KMAKKJRDPEDTNBKZKPYW 

24 LNBLLKSEQFEUOCLALQZX 

25 MOCMMLTFRGFVPDMBMRAY 


1 3 

C 0 

s Q 

N E 
R 0 
M 0 
0 N 
I V 
T H 
S T 
D I 
S H 
E X 
F R 
N F 
W 0 
E D 
S 0 
A T 
I C 
C A 


f Combining the seleded generainces —^After some expen- 
mentmg with these generatnees the 23d generatnx of Column 1 and 
the 1st of Column 2, which yield the digraphs shown m Fig 17ffi, 
are combmed The generatnees of the subsequent columns are 
exammed to select those which may be added to these already 
selected m order to build up the plain text The results are shown 
m Fig 176 This process is a very valuable aid m the solution of 
messages after the pnmary component has been recovered as a 
result of the longer and more detailed analysis of the frequency 
distributions of the first message mtercepted Very often a short 
message can be solved m no other way than the one shown, 
if the pnmary component is completely known 

g Recovery of the key —^It may be of interest to find the key 
word for the message Assunung that enciphenng method num¬ 
ber 1 (see Par 7/, page 6) were known to be employed, all that 
IS necessary is to set the mixed component of the cipher alphabet 
underneath the plam component so as to produce the cipher letter 
mdicated as the eqmvalent of any given plain-text letter m each 
of the alphabets For example, m the first alphabet it is noted that 
Cp=Sc Adjust the two components under each other so as to 
bnng S of the cipher component beneath C of the plam component, 
thus, 


1 3 3 4 5 6 7 

C 0 F I R S T 
S Q U A D R 0 
N E N E M Y T 
R 0 0 P D I S 
MOUNTED 
0 N H I L L F 
I V E N I N E 
T H R E E W E 
S T 0 F G 0 0 
D I N T E N T 
S H X L I N E 
EXTENDS 
F R 0 M C 0 R 
N F I E L D T 
W 0 H U N D R 
E D Y A R D S 
S 0 U T H X I 
A T T A C K R 
I C H A R D S 
C A P T 


Fiavu 175 
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Plain- ABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZ 

Cipher.- EXHAUSTINGBCDFJKLMOPQRVWYZ 

It IS noted that Ap=Ao Hence, the first letter of the key word to the message is A The 2d, 
3d, 4th, 7th key letters are found in exactly the same manner, and the following is obtained 
When C 0 F I R S T equals 

S F D Z R Y R then Ap successively equals 
AZIMUTH 

24 Summation of relative frequencies as an aid to the selection of the correct generatrices — 
a In the foregoing example, under subparagraph /, there occurs this phrase “After some 
expenmen ting with these generatnees ” By this was meant, of course, that the selection of 

the correct imtial pair of generatnees of plain-text equivalents is m this process a matter of tnal 
and error The test of “correctness” is whether, when juxtaposed, the two generatrices so 
selected yield “good” digraphs, that is, high-frequency digraphs such as occur m normal plain 
text In his early efforts the student may have some difficulty m selectmg, merely by ocular 
exaimnation, the most likely generatnees to try There may be in each diagram several gen- 
eratnees which contam good assortments of high-frequency letters, and the number of tnals of 
combmations of generatnees may be quite large Perhaps a simple mathematical method may 
be of assistance m the process 

h Suppose, m Fig 16, that each letter were accompamed by a number which corresponds 
to its relative frequency in normal Enghsh telegraphic text Then, by addmg the numbers along 
each horizontal hne, the totals thus obtamed will serve as relative numencal measures of the 
frequency values of the respective generatnees Theoretically, the generatnx with the greatest 
value will be the correct generatnx because its total will represent the sum of the individual 
values of the actual plaintext letters In actual practice, of course, the generatnx with the 
greatest value may not be the correct one, but the correct one will certamly be among the three 
or four generatnees wnth the largest values Thus, the number of tnals may be greatly reduced, 
m the attempt to put together the correct generatnees 

c Usmg the precedmg message as an example, note the respective generatnx values in Fig 
18 The frequency values of the respective letters shown m the figure are based upon the normal 
distnbution for War Department telegraphic text (see Table 3, Appendix 1, Mihtary Crypt¬ 
analysis, Fart I) 
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Column 2 

Generntnx Frequency 

0 NPDNNMUGSHGWQENCNSBZ value 

8348823263330 13 838110 90 

1 OQEOONVHTIHXRFODOTCA 

80 IS 88823073083848037 119 

2 PRFPPOWIUJIYSGPEPUDB 

383388373072023 13 3341 84 

3 QSGQQPXJVKJZTHQFQVEC 

062003002000030302 13 3 4G 

4 RTHRRQYKWLKAUIRGRWFD 

80388030340737828234 88 

5 SUISSRZLXMLBVJSHSXGE 

687068040341300360313 79 

6 TVJTTSAMYNMCWKTITYHF 

02098173282820870333 94 

7 UWKUUTBNZONDXLUJUZIG 

32033018088404803073 68 

8 V X L V V U C 0 A P 0 E Y M V K V A J H 

204333387881322202708 73 

9 WYMWWVDPBQPFZNWLWBKI 

22222243103808242107 50 

10 XZNXXWEQCRQGAOXMXCLJ 

008003 13 0380378020340 60 

11 YAOYYXFRDSRHBPYNYDMK 

27822038468813282420 75 

12 ZBPZZYGSETSICQZOZENL 

013002261306730080 18 84 85 

13 ACQAAZHTFUTJDRAPAFOM 

73077030380048737882 93 

14 BDRBBAIUGVUKESBQBGPN 

148117732230 13 6101238 73 

15 CESCCBJVHWVLFTCRCHQO 

313633102822480883308 79 

16 DFTDDCKWIXWMGUDSDIRP 

48944302703223464783 77 

17 EGUEEDLXJYXNHVETEJSQ 

13 23 13 13 440030832 13 9 13 060 108 

18 FHVFFEMYKZYOIWFUFKTR 

33233 13 22002872838008 76 

19 GIWGGFNZLAZPJXGVGLUS 

37332880470800222436 59 

20 HJXHHGOAMBAQKYHWHMVT 

80088387317003323220 59 

21 IKYIIHPBNCBRLZIXINWU 

70377331881840707823 81 

22 JLZJJIQCODCSMAJYJOXV 

04000708848637030802 56 

23 KMAKKJRDPEDTNBKZKPYW 

027000848134981000832 66 

24 LNBLLKSEQFEUOCLALQZX 

48144061303 13 383474000 85 

25 MOCMMLTFRGFVPDMBMRAY 

28823408883234312872 
Fiouu 18 
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d It will be noted that the frequency value of the 23d generatrix for the first column of 
cipher letters is the greatest, that of the first generatrix for the second column is the greatest 
In both cases these are the correct generatrices Thus the selection of the correct generatnces 
m such cases has been reduced to a purely m athematical basis which is at tunes of much assistance 
m effectmg a qmck solution Moreover, an understandmg of the pnnciples mvolved wiU be of 
considerable vdue m subsequent work 

26 Solution by the probable-word method .—a Occasionally one may encounter a crypto¬ 
gram which 18 so short that it contams no recurrences even of digraphs, and thus gives no indi¬ 
cations of the number of alphabets mvolved If the slidmg mixed component is known, one may 
apply the method illustrated m Par 15, assummg the presence of a probable word, checking it 
against the text and the shdmg components to establish a key, if the correspondents are usmg 
key words 

h For example, suppose that the presence of the word ENEMY is assumed m the message 
m Par 236 above One proceeds to check it agamst an imknowm key word, shdmg the already 
reconstructed mixed component agamst the normal and startmg wath the first letter of the 
cryptogram, m this manner 
When ENEMY equals 

SFDZR then Ap successively equals 
XENFW 

The sequence XENFW spells no mtelligible word Therefore, the location of the assumed word 
ENEMY IS ^fted one letter forward m the cipher text, and the test is made agam, ]ust as was 
explamed m Par 15 When the group AQI^U is tried, the key letters ZIMUT are obtained, 
which, taken as a part of a word, suggests the word AZIMUTH The method must yield solution 
when the correct assumptions are made 

c The danger to cryptographic security resulting from the mclusion of cryptographed 
addresses and signatures m cryptographic messages becomes qmte obvious m the hght of 
solution by the probable-word method To illustrate, reference is made to the message employed 
m Pars 19-22 It will be noted m Par 226 that the message earned a signature (Treer, Col) 
and that the latter was enciphered Suppose that this were an authorized practice, and that 
every message could be assumed to conclude with a cryptographed signature The signature 
“TREER COL” would at once afford a very good basis for the qmck solution of subsequent mes¬ 
sages emanatmg from the same headquarters as did the first message, because presumably this 
same signatme would appear m other messages It is for this reason that addresses and signa¬ 
tures must not be cryptographed, if they must be included they should be cryptographed m a 
totally different system or by a wholly different method, perhaps by means of a special address 
and signature code It would be best, however, to omit all addresses and signatures, and to 
let the call aigna of the headquarters concerned also convey these parts of the message, leavmg 
the dehvery to the addressee a matter for local action 

26 Solution when the plain component is a mixed sequence, the cipher component, the 
normal—a This falls under Case B (2) outbned in Par 6 It is not the usual method of 
employing a single mixed component, but may be encountered occasionally m cipher devices 
6 The prelimmary steps, as regards factoimg to detenmne the length of the penod, are 
the same as usual The message is then transcribed mto its periods Frequency distributions 
are then made, as usual, and these are attacked by the pnnciples of frequency and recurrence, 
An attempt is made to apply the pnnciples of direct symmetry of position, but this attempt 
wdl be futile, for the reason that the plain component is in this case an unknovm mixed sequence 
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(See Par ISd) Any attempt to find symmetry m the secondary alphabets based upon the normal 
sequence can therefore disclose no symmetry because the symmetry which exists is based upon a 
whoUy different sequence 

c However, if the pnnciples of direct symmetry of position aie of no avail m tViia case, 
there are ceitain other pnnciples of symmetry which may be employed to great advantage 
To explain them an actual example will be used Let it be assumed that it is known to the 
cryptanalyst that the enemy is usmg the general system under discussion, viz, a mixed sequence, 
variable from day to day, is used as plam component, the normal sequence is used as cipher 
component, and a repeating key, vanable fi( in message to message, is used m the ordmary 
manner 

The followmg message has been mtercepted 

12 8 4 6 8 

A QEOVK LRMLZ JVGTG NDLVK EVNTY ERMUE 

B VRZMO YAAMP DKEIJ SFMYO YHMME GQAMB 

C UQAXR HUFBU KQYMU NELVT KQILE KZBUE 

D ULIBK NDAXB XUDGL LADVK POAYO DKKYK 

E LADHY BVNFV UEEME FFMTE GVWBY TVDZL 

F SPBHB XVAZC UDYUE LKMMA EUDDK NCFSH 

G HSAHY TMGUJ HQXPP DKOUE XUQVB FVWBX 

H NXALB TCDLM IVAAA NSZIL OVWVP YAGZL 

J SHMME GQDHO YHIVP NCRRE XKDQZ GKNCG 

K NQGUY JIWYY TMAHW XRLBL OADLG NQGUY 

L JUUGB JHRVX ERFLE GWGUO XEDTP DKEIZ 

M VXNWA FAANE MKGHB SSNLO KJCBZ TGGLO 

N PKMBX HGERY TMWLZ NQCYY TMWIP DKATE 

P FLNUJ NDTVX JRZTL OPAHC DFZYY DEYCL 

Q GPGTY TECXB HQEBR KVWMU NINGJ IQDLP 

R JKATE GUWBR HUQWM VRQBW YRFBF KMWMB 

S TMULZ LAAHY JGDVK LKRRE XKNAO NDSBX 

T XCGZA HDGTL VKMBW ISAUE FDNWP NLZIJ 

V SRQZL AVNHL GVWVK FIGHP GECZU KQAP 

d A study of the recurrences and factoring their mtervals discloses that five alphabets are 
involved Umliteral frequency distributions are made and are shown m Fig 19a 

Alphabet 1 


- 3 i g g g 5 g g g ^ g 5 ^ gggg gg 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 

Alphabet 2 

i- gg ==g 

g 5 g g 5 5 S 5 ,, g 5 g ^5ggg g g ^ 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 
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Alphabet 3 



gasggggg 5 ^5gg% g5^-.!s g^5g 
ABCDEFGHIJKLMNOPQRSTUVWXYZ 

Alphabet 4 

g g gg ggg^-. 

g ^ ^ ^5gg gg^ ^ 5 ^ g g g 5 5 g g 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 

Alphabet 6 


g g == g =: 5 g 

gg= g 5 ^ ggg= gg 5 ^ g 5 g g g 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 

PiQUBE 18a 

e Smce the cipher component in this case is the normal alphabet, zt follows that the five 
frequenay dzstnlmtzons are hosed upon a sequence which is known, and therefore, the five frequency 
distributions should manifest a direct symmetry of distribution of crests and troughs By virtue of 
this symmetry and by shifting the five distnbutions relative to one another to proper supenm- 
positions, the several distributions may be combmed mto a smgle umhteral distnbution Note 
how this shiftmg has been done m the case of the five illustrative distnbutions 

Alphabet 1 


^ g g g g g 5 g I g ^ i 5 gggg gg 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 
Alphabet 2 

g 5= 5; 

= = ^ g g g g 

== ^g gggSSgS^gSg ^Sggg g g 

XYZABCDEFGHIJKLMNOPQRSTUVW 
Alphabet 3 
g % 

g g g g g g 

^ g^5gg = ggggg 5 ^ 5 g g gs^ 

TUVWXYZABCDEFGHIJKLMNOPQRS 
Alphabet 4 

ggg ^^g g gg 

^ ^ g g g 5 5 g g = g %^5gg g g 

OPQRSTUVWXYZABCDEFGHIJKLMN 
Alphabet 5 

=5 g 

g^g g Sg 5g 

5 g 5 g g g g g g^5^ g g g =; gg 

RSTUVWXYZABCDEFGHIJKLMNOPQ 

PiauBB 19t 


1B201S—88- i 







46 


J The supenmposition of the respective distnbutions enables one to convert the cipher 
letters of the five alphabets into one alphabet Suppose it is decided to convert Alphabets 
2, 3,4, and 5 into Alphabet 1 It is merely necessary to substitute for the respective letters m 
the four alphabets those which stand above them m Alphabet 1 For example, m Fig Idft, Xg 
m Alphabet 2 is directly under Ag m Alphabet 1, hence, if the supenmposition is correct then 
Xg=Ag Therefore, m the cryptogram it is merely necessary to replace every X, m the second 
position by Ag Agam Tg m Alphabet 3=A, m Alphabet 1, therefore, m the cryptogram one 
replaces every T, m the third position by Ag The entire process, heremafter designated as 
conversion vnto monoalphabetw terms, gives the foUowmg converted message 


13 8 4 18 


A 
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V 
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T 

L 

U 
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X 
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Y 

N 

F 

P 
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S 
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Y 

U 

F 

H 

E 

U 

T 

G 
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U 
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D 

H 
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K 

X 

Y 
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T 
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The unihteral frequency distnbution for this converted text follows Note that the frequency 
of each letter is the sum of the five frequencies m the corresponding columns of Fig 196 
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ABC DEFGHIJKLMNOPQRSTUVWXYZ 


7 8 3 31 7 80 38 M 18 31 38 22 8 888 14 2 3 19 48 38 13 88 39 3 
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g The problem havmg been reduced to monoalphabetic terms, a tnhteral frequency distn¬ 
bution can now be made and solution readily attained by simple principles It yields the 
followmg 

JAPAN CONSULTED GERMANY TODAY ON REPORTS THAT THE COMMUNIST INTERNATIONAL 
WAS BEHIND THE AMAZING SEIZURE OF GENERALISSIMO CHIANG KAI SHEK IN CHINA 
TOKYO ACTED UNDER THE ANTICOMMUNIST ACCORD RECENTLY SIGNED BY JAPAN AND GER¬ 
MANY THE PRESS SAID THERE WAS INDISPUTABLE PROOF THAT THE COMINTERN INSTI¬ 
GATED THE SEIZURE OF GENERAL CHIANG AND SOME OF HIS GENERALS MILITARY OB¬ 
SERVERS SAID THE COUP WOULD HAVE BEEN IMPOSSIBLE UNLESS GENERAL CHANG HSUEN 
LIANG HOTHEADED FORMER WAR LORD OF MANCHURIA HAD FORMED AN ALLIANCE WITH THE 
COMMUNIST LEADERS HE WAS SUPPOSED TO BE FIGHTING SUCH AN ALLIANCE THESE 
OBSERVERS DECLARED OPENED UP A RED ROUTE FROM MOSCOW TO NORTH AND CENTRAL 
CHINA 

h The reconstruction of the plam component is now a very smiple matter It is found to 
be as follows 

HYDRAULICBEFGJKMNOPQSTVWXZ 

Note also, m Fig 196, the keyword for the message, (HEAVY), the letters being m the columns 
headed by the letter H 

4 The solution of subsequent messages with different keys can now be reached directly, by 
a simple modification of the prmciples explamed m Par 18 This modification consists m usmg 
for the completion sequence the mixed 'plain component (now known) mstead of the normal alpha¬ 
bet, after the cipher letters have been converted mto their plam-component eqmvalents Let 
the student confirm this by experiment 

y The probable-word method of solution discussed under Paragraph 20 is also apphcable 
here, m case of very short cryptograms This method presupposes of course, possession of the 
mixed component and the procedme is essentially the same as that m Par 20 In the example 
discussed m the present paragraph, the letter A on the plam component was successively set 
agamst the key letters HEAVY, but this is not the only possible procedure 

k The student should go ovei carefully the prmciple of “conversion mto monoalphabetic 
terms” explained m subpaiagraph/ above until he thoroughly understands it Later on he will 
encounter cases m which this prmciple is of very great assistance m the cryptanalysis of more 
complex problems (Another example will be found under Par 45 ) 

I The principle illustrated in subparagraph e, that is, shifting two or more monoalphabetic 
frequency distributions relatively so as to bring them into proper ahgmnent for amalgamation 
mto a smgle monoalphabetic distribution, is called matching It is a very important crypt- 
analytic prmciple Note that its practical apphcation consists m shdmg one monoalphabetic 
distribution against the other so as to obtain the best comcidence between the entire sequence 
of crests and troughs of one distnbution and the entire sequence of crests and troughs of the other 
distribution When the best point of coincidence has been found, the two sequences may be 
amalgamated and theoretically the smgle resultant distribution will also be monoalphabetic m 
character The successful apphcation of the principle of matching depends upon several factors 
First, the cryptographic situation must be such that matching is a conect cryptographic step 
For example, the distributions m figure 196 are properly subject to matching because the cipher 
component m the basic sequences concerned in this problem is the normal sequence, while the 
plam component is a mixed sequence But it would be futile to tiy to match the distiibutions 
in figure 9, for m that case the cipher component is a mixed sequence, the plam component is 
the normal sequence Hence, no amount of shiftmg or matchmg can bnng the distnbutions of 
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figure 9 into proper supenmposition for correct amalgamation (If the occurrences m the various 
distributions m figure 9 had been distributed according to the sequence of letters m the mixed 
component, then matchmg would be possible, but m order to be able to distnbute these occuiv 
rences accordmg to the mixed component, the latter has to be known —and that is just what is 
unknown until the problem has been solved ) A second factor involved in successful matching 
IS the number of elements m the two distributions formmg the subject of the test If both 
of them have very few talhes, there is hardly sufficient information to permit of matchmg wiUi 
any degree of assurance that the work is not m vam If one of them has many talhes, the other 
only a few, the chances for success are better than before, because the positions of the blanks m 
the two distributions can be used as a guide for their proper supenmposition 

m There are certam mathematical and statistical procedures which can be brought to bear 
upon the matter of ciyptanalytic matchmg These will bo presented m a later text However, 
until the student has studied these mathematical and statistical methods of matchmg distn- 
butions, he will have to rely upon mere ocular examination as a guide to proper supenmposition 
Obviously, the more data he has m each distnbution, the easier is the correct supenmposition 
ascertamed by any method 
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REPEATING-KEY SYSTEMS WITH MIXED CIPHER ALPHABETS, II 

Faragnph 

Further cases to be considered —----- 27 

Identical primary mixed components proceeding in the same direction -—- 28 

Cryptographing and decryptographing by means of identical primary mixed components- 29 

Prmciples of solution- 30 

27. Further cases to be considered — a Thus far Cases B (1) and (2), mentioned m Para¬ 
graph 6 have been treated There remams Case B (3), and this case has been further subdivided 
as follows 

Case B (3) Both components are mixed sequences 

(a) Components are identical mixed sequences 

(1) Sequences proceed m the same direction (The secondary alphabet are mixed 

alphabets) 

(2) Sequences proceed m opposite directions (The secondary alphabets are 

reciprocal mixed alphabets) 

(b) Components are different mixed sequences (The secondary alphabets are mixed 

alphabets) 

h The first of the foregoing subcases will now be examined 

28 Identical primary mixed components proceedmg in the same direction —a It is often 
the case that the mixed components are derived from an easily remembered wortl or phrase, 
so that they can be reproduced at any time from memory Thus, for example, given the key 
word QUESTIONABLY, the followmg mixed sequence is denved 

QUESTIONABLYCDFGHJKMPRVWXZ 
h By using this sequence as both plam and cipher component, that is, by sliding this 
sequence against itself, a senes of 26 secondary mixed alphabets may be produced In encipher- 
mg a message, shding stnps may be employed with a key word to designate the particular and 
successive positions in which the stnps are to be set, the same as was the case in previous examples 
of the use of shding components The method of designatmg the positions, however, requires 
a word or two of comment at this point In the examples thus far shown, the key letter, as 
located on the cipher component, was always set opposite A, as located on the plam component, 
possibly an erroneous impression has been created, m, that this is invanably the rule This 
IS decidedly not true, as has already been explained m paragraph 7c If it has seemed to be the 
case that 0k always equals Ap, it is only because the text has dealt thus far pnncipally with cases m 
which the plam component is the normal sequence and its intital letter, which usually consti¬ 
tutes the mdex for juxtaposing cipher components, is A It must be emphasized, however, 
that various conventions may be adopted m this respect, but the most common of them is to 
employ the ini tial letter of the plam component as the mdex letter That is, the mdex letter, 
01, will be the mitial letter of the mixed sequence, m this case, Q Furthermore, to prevent the 
possibihty of ambiguity it will be stated again that the pair of enciphenng equations employed 
m the ensumg discussion will be the first of the 12 set forth under Par 7/, otz, 0p/i=06/j 

In this case the subscript “1” means the plam component, the subscript “2”, the cipher 
component, so that the enciphenng equation is the followmg 0k/B=9i/p> 0 d/p=9«/o 
(49) 
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c By setting the two sliding components against each other in the two positions shown 
below, the cipher alphabets labeled (1) and (2) given by two key letters, A and B, are seen to be 
different 

Key Letter=a 9, 

4 . 

Plain component. QUESTIONABLYCDFGHJKMPRVVfXZQUESTI ONABLYCDFGHJKMPRVWXZ 

Cipher component. QUESTIONABLYCDFGHJKMPRVWXZ 

t 

Ok 

Secondary alphabet (1) 

Plain. ABCDEFGHIJKLMNOPQRSTUVWXYZ 

Cipher_ HJPRLVWXDZQKUGFEASYCBTIOMN 

Key Letter=B 9, 

Plam component- QUESTIONABLYCDFGHJKMPRVWXZQUESTIONABLYCDFGHJKMPRVffXZ 

Cipher component-- QUESTIONABLYCDFGHJKMPRVWXZ 

r 

©k 

Secondary alphabet (2) 

Plam. ABCDEFGHIJKLMNOPQRSTUVWXYZ 

Cipher. JKRVYWXZFQUMEHGSBTCDLIONPA 

d Very frequently a quadricular or square table is employed by the correspondents, mstead 
of sliding strips, but the results are the same The cipher square based upon the word QUESTION¬ 
ABLY IS shown in Fig 21 It will be noted that it does nothmg more than set forth the successive 
positions of the two pnmary sliding components, the top Ime of the square is the plam component, 
the successive honzontal hues below it, the cipher component m its various juxtapositions The 
usual method of employing such a square (i e , corresponding to the enciphermg equations 
0k/c=6i/p, 0p/p=6c/c) IS to take as the cipher equivalent of a plam-text letter that letter which 
lies at the intersection of the vertical column headed by the plam-text letter and the honzontal 
row begun by the key letter For example, the cipher equivalent of Ep with keyletter T is the 
letter Oc, or Ep (Tk)=0e The method given m paragraph 6, for dete rminin g the cipher equiva¬ 
lents by means of the two sliding stnps yields the same results as does the cipher square 
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QUESTIONABLYCDFGHJKMPRVWXZ 

UESTIONABLYCDFGHJKMPRVWXZQ 

ESTIONABLYCDFGHJKMPRVWXZQU 

STIONABLYCDFGHJKMPRVWXZQUE 

TIONABLYCDFGHJKMPRVWXZQUES 

lONABLYCDFGHJKMPRVWXZQUEST 

ONABLYCDFGHJKMPRVWXZQUESTI 

NABLYCDFGHJKMPRVWXZQUESTIO 

ABLYCDFGHJKMPRVWXZQUESTION 

BLYCDFGHJKMPRVWXZQUESTIONA 

LYCDFGHJKMPRVWXZQUESTIONAB 

YCDFGHJKMPRVWXZQUESTIONABL 

CDFGHJKMPRVWXZQUESTIONABLY 

DFGHJKMPRVWXZQUESTIONABLYC 

FGHJKMPRVWXZQUESTIONABLYCD 

GHJKMPRVWXZQUESTIONABLYCDF 

HJKMPRVWXZQUESTIONABLYCDFG 

JKMPRVWXZQUESTIONABLYCDFGH 

KMPRVWXZQUESTIONABLYCDFGHJ 

MPRVWXZQUESTIONABLYCDFGHJK 

PRVWXZQUESTIONABLYCDFGHJKM 

RVWXZQUESTIONABLYCDFGHJKMP 

VWXZQUESTIONABLYCDFGHJKMPR 

WXZQUESTIONABLYCDFGHJKMPRV 

XZQUESTIONABLYCDFGHJKMPRVW 

ZQUESTIONABLYCDFGHJKMPRVWX 

29. Cryptographing and decryptographing by identical primary mixed components —There 
IS nothmg of special mterest to be noted m connection with the use either of identieal imxed 
components or of an equivalent quadncular table such as that shown m Fig 21, in enciphermg or 
deciphenng a message The basic principles are the same as m the case of the shdmg of one 
mixed component agamst the normal, the displacements of the two components bemg controlled 
by changeable key words of varying lengths The components may be changed at will and so on 

this has been demonstrated adequately enough m Elementary Military Cryptography, and 
Advanced Military Cryptography 

30. Principles of solution .—a Basically the principles of solution in the case of a crypto¬ 
gram enciphered by two identical mixed sliding components are the same as m the precedmg 
case Primary recourse is had to the pimciples of frequency and repetition of smgle letters, 
digraphs, trigraphs, and polygraphs Once an entering wedge has been forced into the problem, 
the subsequent steps may consist merely m contmuing along the same hnes as befoie, buildmg 
up the solution bit by bit 

b Doubtless the question has already ansen in the student’s mind as to whether any 
prmciples of symmetery of position can be used to assist m the solution and m the reconstruction 
of the cipher alphabets m cases of the kmd under consideration This phase of the subject will 
be taken up m the next section and will be treated in a somewhat detailed manner, because the 
theory and prmciples mvolved are of very wide application m cryptanalytics. 














Section VII 

THEORY OF INDIRECT SYMMETRY OF POSITION IN SECONDARY ALPHABETS 


Paragraph 

Eeconstruction of pnmary componentB from secondary alphabets- 31 

31 Reconstruction of primary components from secondary alphabets —a Note the two 
secondary alphabets (1) and (2) given m paragraph 28c Externally they show no resemblance 
or symmetry despite the fact that they were produced from the same pnmary components 
Nevertheless, when the matter is studied with care, a symmetry of position is discoverable 
Because it is a hidden or latent phenomenon, it may be termed latent symmetry of pos^iion 
However, m previous texts the phenomenon has been designated as an indirect symmetry of position 
and this termmology has grown mto usage, so that a change is perhaps now madvisable 
Indirect symmetry of position is a very mterestmg and exceedmgly useful phenomenon m 
cryptanalytics 

b Consider the followmg secondary alphabet (the one labeled (2) m paragraph 28c) 

. . fPlam_ ABCDEFGHIJKLMNOPQRSTUVWXYZ 

^ ’ (Cipher. JKRVYWXZFQUMEHGSBTCDLIONPA 

c Assuming it to be known that this is a secondary alphabet produced by two pnmary 
identical mixed components, it is desired to reconstruct the latter Construct a chain of alter- 
natmg plam-text and cipher-text equivalents, begmmng at any pomt and contmumg until the 
cham has been completed Thus, for example, beginning with Ap=Je, Jd=Qcj Qd=Bo, , and 
droppmg out the letters common to successive pairs, there results the sequence A J Q B By 

completing the cham the followmg sequence of letters is estabhshed 

AJQBKULMEYPSCRTDVIFWOGXNHZ 

d This sequence consists of 26 letters When slid against -dself it will produce exactly the 
same secondary alphabets as do the pnmary components based upon the word QUESTIONABLY 
To demonstrate that this is the case, compare the secondary alphabets given by the two settmgs 
of the externally different components shown below 

Flam component. QUESTIONABLYCDFGHJKMPRVWXZQUESTIONABLYCDFGHJKMPRVWXZ 

Cipher component_ QUESTIONABLYCDFGHJKMPRVWXZ 

Secondary alphabet (1) 

Flam_ ABCDEFGHIJKLMNOPQRSTUVWXYZ 

Cipher. JKRVYWXZFQUMEHGSBTCDLIONPA 

Flam component-AJQBKULMEYPSCRTDVIFWOGXNHZAJQBKULMEYPSCRTDVIFWOGXNHZ 

Cipher component.— AJQBKULMEYPSCRTDVIFWOGXNHZ 

Secondary alphabet (2) 

Flam- ABCDEFGHIJKLMNOPQRSTUVWXYZ 

Cipher- JKRVYWXZFQUMEHGSBTCDLIONPA 

(52) 
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e Smee the sequence A J Q B K gives exactly the same equivalents m the secondary 

alphabets as the sequence QUEST gives, the former sequence is cryptographically 

eqmvalent to the latter sequence For this reason the A J Q B K sequence is termed 

an equivalent pnmary component * If the real or original primary component is a key-word mixed 
sequence, it is hidden or latent within the eqmvalent pnmary sequence, but it can be made patent 
by decimation of the equivalent pnmary component The procedure is as follows Find three 
letters m the equivalent pnmary component such as aie hkely to have formed an unbroken 
sequence m the original primary component, and see if the interval between the first and second 
IS the same as that between the second and third Such a case is presented by the letters W, X, 
and Z m the equivalent pnmary component above Note the sequence W 0 G X N H Z , 
the distance or mterval between the letters W, X, and Z is two letters Contmmng the cham by 
addii^ letters two intervals removed, the latent onginal pnmary component is made patent 
Thus 


1 2 3 4 6 6 7 8 9 10 11 12 13 14 IS 16 17 IS 19 20 21 22 23 24 25 26 

WXZQUESTIONABLYCDFGHJKMPRV 

f It is possible to perform the steps given m c and c in a combined smgle operation when the 
onginal pnmary component is a key-word mixed sequence Startmg with any pair of letters (m 
the cipher component of the secondary alphabet) likely to be sequent m the key-vord mixed 
sequence, such as JK* m the secondary alphabet labeled (2), the following chain of digraphs may 
be set up Thus, J,K,m the plain component stand over Q.U, respectively, m the cipher com¬ 
ponent , Q, U, m the plam component stand over B, L, respectively, m the cipher component, and 
so on Connectmg the pairs m a senes, the followmg results are obtamed 

JK -» QU BL -» KM -» UE ^ LY -» MP -» ES ^ YC ^ PR -> ST ^ CD RV -> 

TI -4 DF VW 10 -» FG WX -» ON -♦ GH -» XZ NA -♦ HJ -> ZQ -» AB -» JK 

These may now be umted by means of their common letters 

JK-»KM-»MP->PR->RV-»etc=JKMPRVWXZQUESTIONABLYCDFGH 

The ongmal pnmary component is thus completely reconstructed 

g Not all of the 26 secondary alphabets of the senes yielded by two sliding pnmary compo¬ 
nents may be used to develop a complete equivalent pnmary component If examination be made, 
it will be found that only 13 of these secondary alphabets will yield complete equivalent pnmary 
components when the method of reconstruction shown m subparagraph c above is followed For 
example the following secondary alphabet, which is also derived, from the primary components 
based upon the word QUESTIONABLY will not yield a complete cham of 26 plam text-cipher- 
plam text equivalents 

Flam_ ABCDEFGHIJKLMNOPQRSTUVWXYZ 

apher...... CDHJOKMPBRVFWYLXTZNAIQUEGS 


* Such an equivalent component is merely a sequence which has been or can be developed or derived from 
the onginal sequence or basic pnmary component by applying a decimation process to the latter, conversely, 
the ongmal or basic component can be derived from an equivalent component by applying the same sort of 
process to the equivalent component By decimation is meant the selection of elements from a sequence accord¬ 
ing to some fixed mterval For example, the sequence A E 1 H is denved, by decimation, from the 

normal alphabet by selectmg every fourth letter 
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Equivalent primary component 

1 3 3 4 5 e 7 8 S 10 11 12 U I 1 2 3 

ACHPXEOLFKVQtIaCH (The A C H sequence begins agam ) 

h It IS seen that only 13 letters of the chain have been estabhshed before the sequence begms 
to repeat itself It is evident that exactly one-half of the chain has been estabhshed The other 
half may be estabhshed by begmmng with a letter not m the first half Thus 

1 2 3 4 3 « 7 8 « 10 11 12 13 I 1 2 3 

BDJRZSNYGMWUI|bdJ (The B D J sequence begms agam ) 

% It IS now necessary to distnbute the letters of each half-sequence withm 26 spaces, to 
correspond with their placements in a complete alphabet This can only be done by allowing a 
constant odd number of spaces between the letters of one of the half-sequences Distnbutions 
are therefore made upon the basis of 3, 5, 7, 9, spaces Select that distnbution which 
most nearly coincides with the distribution to be expected m a key-word component Thus, for 
example, with the first half-sequence the distribution selected is the one made by leaving three 
spaces between the letters It is as follows 

1 2 3 4 5 8 7 8 2 10 11 12 13 14 15 16 17 18 1# 20 21 23 23 34 2B 28 

A-L-C-F-H-K-P-V-X-Q-E-T-0- 

3 Now mterpolate, by the same constant mtervaJ (three m this case), the letters of the other 
half-sequence Notmg that the group F - H appears m the foregomg distribution, it is apparent 
that G of the second half-sequence should be mserted between F and H The letter which imme¬ 
diately follows G m the second half-sequence, mz, M, is next mserted m the position three spaces to 
the nght of G, and so on, until the mterpolation has been completed This yields the ongmal 
primary component, which is as follows 

1 3 3 4 5 6 7 8 0 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 28 26 

ABLYCDFGHJKMPRVWXZQUESTION 

k Another method of handhng cases such as the foregoing is mdicated m subparagraph / 
By extendmg the principles set forth in that subparagiaph, one may reconstruct the following 
cham of 13 pairs from the secondary alphabet given in subparagraph g 
1 2 3 4 5 8 7 8 9 10 11 12 IS I 1 

CD -» HJ ^ PR -> XZ ^ ES -> ON ^ LY ^ FG ^ KM -> Vff -4 QU ^ TI ^ AB 1^ CD . . . 

Now find, in the foregoing cham, two pairs likely to be sequent, for example HJ and KM and count 
the mterval between them in the cham It is 7 (countmg by pairs) If this decimation mterval 
IS now applied to the cham of pairs, the follow mg is estabhshed 

1 3 3 4 6 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 23 28 24 25 28 

HJKMPRVWXZQUESTIONABLYCDFG 

I The reason why a complete chain of 26 letteis cannot be constructed from the secondary 
alphabet given under subparagraph g is that it represents a case m which two primary com¬ 
ponents of 26 letters were slid an even number of mtervals apart (This will be explained m 
further detail in subparagraph r below) There are in all 12 such cases, none of which will 
admit of the construction of a complete chain of 26 letters In addition, there is one case where- 
m, despite the fact that the piimaiy components are an odd number of intervals apart, the 
secondary alphabet cannot be made to yield a complete chain of 26 letters for an equivalent 
primary component This is the case m which the displacement is 13 mtervals Note the 
secondary alphabet based upon the primary components below (which are the same as those 
showm m subparagraph d) 
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Pbimaky Components 

QUESTIONABLYCDFGHJKMPRVWXZ 

DFGHJKMPRVWXZQUESTIONABLYC 

Secondaby Alphabet 

Plain_ ABCDEFGHIJKLMNOPQRSTUVWXYZ 

Cipher._ RVZQGUESKTIWOPMNDAHJFBLYXC 

771 If an attempt is made to construct a cham of letters from this secondary alphabet alone, 
no progress can be made because the alphabet is completely reciprocal However, the crypt¬ 
analyst need not at all be baffied by this case The attack will follow along the Imes shown below 
m subparagraphs n and o 

n If the ongmal primary component is a key-word mixed sequence, the cryptanalyst may 
reconstruct it by attempting to “dovetail” the 13 reciprocal pairs (AR,BV,CZ,DQ,EG,FU,HS, 
IK, JT,Lff,M0,NP, and XY) mto one sequence The members of these pairs are all 13 mtervals 
apart Thus 

6138486789 10 11 13 13 

A . R 

B ... V 

C . . Z 

D . . . . Q 

E G 

F . . U 

H . S 

I K 

J . . . T 

L . . . . . W 

M . . . 0 

N . . . . P 

X . Y 

FiauxE 23 

Write out the senes of numbers from 1 to 26 and msert as many pairs mto position as possible 
being guided by considerations of probable partial sequences m the key-word mixed sequence. 
Thus 

0 1 2 3 4 6 6 7 8 9 10 11 12 13 14 15 16 

ABCD RVZQ 

It begms to look as though the key-word commences with the letter Q, m which case it should 
be followed by U This means that the next pair to be mserted is FU Thus 

0 1 2 3 4 8 6 7 8 9 10 11 13 18 14 18 16 17 

ABCDF RVZQU 

The sequence ABCDF means that E is m the key Perhaps the sequence isABCDFGH 
Upon tnal, usmg the pairs EG and HS, the following placements are obtamed 

0 1 3 3 4 8 6 7 8 9 10 11 12 18 14 15 16 17 18 19 

ABCDFGH . RVZQUES 

This suggests the word QUEST or QUESTION The pair JT is added 

0 1 2 3 4 8 6 7 8 9 10 11 12 18 14 18 16 17 18 19 20 

ABCDFGHJ.RVZQUEST 
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The sequence G H J su^ests G H J K, which places an I after T Enough of the process has 
been shown to make the steps clear 

0 Another method of circumventmg the difficulties mtroduced by the 14th secondary 
alphabet (displacement mterval, 13) is to use it m conjunction with another secondary alphabet 
which IS produced by an even-mterval displacement For example, suppose the followmg two 
secondary alphabets are available ‘ 

0- ABCDEFGHIJKLMNOPQRSTUVWXYZ 

1 - RVZQGUESKTIWOPMNDAHJFBLYXC 

2 - XZESKTIORNAQBWVLHYMPJCDFUG 

Fiouke 23 

The first of these secondaries is the 13-mterval secondary, the second is one of the even- 
mterval secondaries, from which only half-cham sequences can be constructed But if the con¬ 
struction be based upon the two sequences, 1 and 2 m the foregomg diagram, the followmg is 
obtained 

RXUTNLDHMVZEIAYFJPWQSOBCGK 

This IS a complete equivalent primary component The ongmal key-word mixed component 
can be recovered from it by decimation based upon the 9th interval 

RVWXZQUESTIONABLYCDFGHJKMP 

p (1) When the primary components are identical mixed sequences proceedmg m opposite 
directions, all the secondary alphabets will be reciprocal alphabets Reconstruction of the 
primary component can be accomphshed by the procedure indicated under subparagraph o 
above Note the foUowmg three reciprocal secondary alphabets 

1 2 3 4 3 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 23 26 

0 ... ABCDEFGHIJKLMNOPQRSTUVWXYZ 

1.. .. PMHGQFDCWYLKBRVAENZXUOITJS 

2.. .. WVMKSJHGQFDRCXZYILEUTBANPO 

3.. .. TSSZLXWVNRPEMIOKCJBAYHGFUD 

Fiqtjiie 24. 

(2) Usmg hnes 1 and 2, the followmg chain can be constructed (equivalent primary com¬ 
ponent) 

_ PWQSOBCGKRXUTNLDHMVZEIATFJ 

‘ The method of writing down the secondaries shown in figure 23 will hereafter be followed in all cases when 
alphabet reconstruction skeletons are necessary The top line will be understood to be the plain component, it 
IS common to all the secondary alphabets, and is set off from the cipher components by the heavy black hne 
This top line of letters will be designated by the digit 0, and will be referred to as “the zero line” in the diagram 
The successive lines of letters, which occupy the space below the zero line and which contain the various cipher 
components of the several secondary alphabets, will be numbered serially These numbers may then be used as 
reference numbers for designating the hon/ontal lines in the diagram The numbers standing above the letters 
may be used as reference numbers for the vertical columns in the diagram Hence, any letter in the reconstruc¬ 
tion skeleton may be designated by coordinates, giving the horizontal or X coordinate first Thus, D (2-11) 
means the letter D standing in line 2, Column 11 
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Or, usmg bnes 2 and 3 

WTYKZODPUAGVSLJXICMQNFREBH 

The ongmal key-word mixed primary component (based on the word QUESTIONABLY) can 
be recovered from either of the two foregomg equivalent primary components But if hues 1 
and 3 are used, only half-chams can be constructed 

PTFXAKECVOHQL and MSDWNJUYRIGZB 

This 18 because 1 and 3 are both odd-interval secondary alphabets, whereas 2 is an even- 
mterval secondary It may be added that odd-mterval secondaries are characterized by havmg 
two cases m which a plam-text letter is enciphered by itself, that is. Op is identical with 0o 
This phrase “identical vnth” will be represented by the symbol =, the phrase “not identical 
with” will be represented by the symbol ^ (Note that m secondary alphabet number 1 above, 
Fp^Fo and UpsUp, m secondary alphabet number 3 above, Mp=Mo and 0p=0o) This charac¬ 
teristic will enable the cryptanalyst to select at once the proper two secondaries to work with m 
case several are available, one should show two cases where 0p=0o, the other should show 
none 

g (1) When the primary components are different mixed sequences, their reconstruction 
from secondary cipher alphabets follows along the same hnes as set forth above, imder 6 to j, 
mclusive, with the exception that the selection of letters for building up the chain of eqmvalents 
for the primary cipher component is restricted to those below the zero hne m the reconstruction 
skeleton Havmg reconstructed the primary cipher component, the plam component can be 
readily reconstructed This will become clear if the student will study the following example 

0 .- ABCDEFGHIJKLMNOPQRSTUVWXYZ 

1.. .. TVABULIQXYCWSNDPFEZGRHJKMO 

2.. .. ZJSTVIQRMONKXEAGBWPLHYCDFU 

Fiqubb 25 

(2) Using only hnes 1 and 2, the followmg chain is constructed 

TZPGLIQRHYOUVJCNEWKDASXMFB 

This 13 an eqmvalent primary cipher component By findmg the values of the successive 
letters of this cham m terms of the plam component of secondary alphabet number 1 (the zero 
hne), the following is obtamed 

TZPGLIQRHYOUVJCNEWKDASXMFB 

ASPTFGHUVJZEBWKNRLXOCMIYQD 

The sequence A S P T is an equivalent primary plain component The ongmal key¬ 
word mixed components may be recovered from each of the equivalent pnmary components 
That for the pnmary plam component is based upon the key PUBLISHERS MAGAZINE, that for 
the pnmary cipher component is based upon the key QUESTIONABLY 












58 


(3) Another method of accomplislung the process mdicated above can be illustrated graphi¬ 
cally by the followmg two chains, based upon the two secondary alphabets set forth m sub- 
paragraph 2 (1) 

1 a 3 4 S 8 7 8 9 10 11 13 13 14 IS IS 17 18 U X 21 aa 28 34 as 28 

0- ABCDEFGHIJKLMNOPQRSTUVWXYZ 

1 - TVABULIQXYCWSNDPFEZGRHJKMO 

2 . ZJSTVIQRMONKXEAGBWPLHYCDFU 


Col 1 Col 2 


A (0-1) 

-> 

T (1-1), 


T (2-4) 


D (0-4), 


D(0-4) 


B (1^), 

-» 

B (2-17) 

-> 

Q (0-17), 

-» 

Q (IM7) 


F (1-17), 

-» 

F (2-25) 

-> 

Y (0-25), 

—> 

Y (0-25) 


M (1-25), 

-» 

M (2-9) 


I (M), 


I (0-9) 


X (1-9), 

-» 

X (2-13) 

-* 

M (0-13), 

-> 

M (0-13) 
etc 


S (1-13), 
etc 


S (2-3) 


C (0-3), 



FlOUIUt 26 


(4) By joining the letters m Column 1, the followmg chain is obtained A D Q Y I H, etc 
If this be exammed, it will be found to be an equivalent primary of the sequence based upon 
PUBLISHERS MAGAZINE By joinmg the letters m Column 2, the followmg cham is obtamed 
T B F M X S This is an equivalent piimary of the sequence based upon QUESTIONABLY 

r A final word concerning the reconstruction of primary components m general may be 
added It has been seen that m the case of a 26-element component sliding against itself (both 
components proceeding m the same direction), it is only the secondary alphabets resulting from 
odd-mterval displacements of the pnmary components which pemut of reconstructing a single 
26-letter cham of equivalents This is true except for the 13th mterval displacement, which 
even though an odd number, stiU acts like an even number displacement m that no complete 
cham of equivalents can be estabhshed from the secondary alphabet This exception gives the 
clue to the basic reason for this phenomenon it is that the number 26 has two factors, 2 and 13, 
which enter mto the picture With the exception of displacement-mterval 1, any displacement 
inierval which is a suh-mvUiple of, o? has a factor in common with the number of letters in the pnmary 
segwnce vnU yield a secondary alphabet from which no complete chain of 26 eguivalenis can be 
denved for the construction of a complete equivalent pnmary component This general rule is 
apphcable only to components which progress m the same direction, if they progress m opposite 
directions, all the secondary alphabets are reciprocal alphabets and they behave exactly like 
the reciprocal secondaries resultmg from the 13-mterval displacement of two 26-letter identical 
components progressmg m the same direction 

8 The foregomg remarks give nse to the followmg observations based upon the general 
rule pomted out above Whether or not a complete equivalent pnmary component is denvable 
by decimation from an original pnmaiy component (and if not, the lengths and numbers of chning 
of letters, or mcomplete components, that can be constructed m attempts to denve such eqiuv- 
alent components) will depend upon the number of letters m the ongmal primary component 
and the specific decimation mterval selected For example, m a 26-letter ongmal pnmaiy com¬ 
ponent, decimation mterval 6 will yield a complete equivalent pnmary component of 26 letters, 
whereas decimation mtervals 4 or 8 will yield 2 chams of 13 letters each In a 24-letter compo¬ 
nent, decimation mterval 6 will also yield a complete eqmvalent pnmary component (of 24 letters), 
but decimation mterval 4 will yield 6 chams of 4 letters each, and decimation interval 8 will 
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yield 3 chams of 8 letters each It also follows that m the case of an ongmal primary com¬ 
ponent m which the total number of characters is a pnme number, aU decimation mtervals will 
yield complete eqmvalent primary components The followmg table has been drawn up m the 
hght of these observations, for ongmal pnmary sequences from 16 to 32 elements (All prime- 
number sequences have been omitted ) In this table, the column at the extreme left gives the 
vanous decimation mteivals, omitting m each case the first mterval, which merely gives the 
ongmal pnmary sequence, and the last mterval, which merely gives the ongmd sequence 
reversed The top Ime of the table gives the vanous lengths of ongmal pnmary sequences from 
32 down to 16 (The student should bear m mmd that sequences contammg characters m addi¬ 
tion to the letters of the alphabet may be encountered, he can add to this table when he is 
mterested m sequences of more than 32 characters ) The numbers withm the table then show, 
for each combmation of decimation mterval and length of, ongmal sequence, the lengths of the 
p-hama of characters that can be constructed (The student may note the symmetry m each 
column ) The bottom Ime shows the total number of complete equivalent pnmary components 
which can be denved for each different length of ongmal component 

Number of characters m original primary component 

32 30 28 27 26 25 24 22 21 20 18 16 
2 16 16 14 27 13 25 12 11 21 10 9 8 










Section VIII 

APPLICATION OF PRINCIPLES OF INDIRECT SYMMETRY OF POSITION 

Paragrai* 


Applying the pnnciples to a speoifio example-- ,3 

The cryptogram employed in the exposition---77" ' - 34 

Fundamental theory. . 35 

Application of principles--- 33 

General remarks. 


82 Applying the principles to a specific example-a The preceding section, mth the 
many det^s^vered, now forma a sufficient base for proceeding with an expoation 
pnnciples of mdirect symmetry of position can be apphed very early m the ® 

Lhabetic substitution cipher m which shding primary components were employed to produce 
the secondary cipher alphabets for the enciphering of the cryptogram , , , 

^ b The?ase descnbed below will serve not only to explam the method 
pnnciples but wiU at the same time show how them application greatly f®^tes Ae ^^on 
of a smgle, rather difficult, polyalphabetic substitution cipher It is realized, of ^ 

cryptogam could be solved by the usual methods of frequency and long, patient e^enmentation 
HoweiS- the method to be described was actually apphed and very matenally reduced the 
amount of time and labor that would otherwise have been required for solution 

33 The cryptogram employed m the exposition -a The problem that will be used m thm 
exposition mvolves an actual cryptogram submitted for solution m connection with a ciphOT 
dOTice havmg two concentnc disks upon which the same random mixed 

alphabets progressmg m the same direction This was obtamed from a study of the d^npti^ 
SL ac'compan^g the cryptogram By the usual process of 

that the cryptogram mvolved 10 alphabets The message as arranged according to its penod 
IS diown m Figure 27, m which all repetitions of two or more letters are mdicated 

6 The tnhteral frequency distributions are given m Figure 28 It wU be se^ Aat on 
account of the brevity of the message, considermg the number of alphabets 
quency distributions do not yield many clues By a very carefu 3*“’ 

Ltative mdividual determmations of values of cipher letters, as ^'^^trated m Figmes 29 30 
31 and 32, were made These are given m sequence and m detail m order to show that there is 
nothmg artificial or arbitrary m the prelimmary stages of analysis here set forth 
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The Cbtptogbam 

(Repetitions underlined) 

12346878S10 12S4S6789 10 123456788 10 

A W F_U F 0 C sLl P R c V 0 P N B L C W EE B_K DZFMTGQJ 
B GBZDPFB 0 U 0 Q LQZAAA M D C H FF L F U Y D T Z V H Q 

C GRFTZMQM O R BZZCKQ0IKF_(5G_ZGffNKXJ 3LR N_ 

D KZ UGD YFTRW S _C F B S C V 3LC H_Q_ HH _Y T X C M V L W 

E JG J X N L W YOU X T_ZTZSDM_XWCM II BGOWOQRGN 

F I K w E p_qzokz U RKUHEQEDGX JJ HHVLAQQVA_V 

G PROiWLZI C_|_ V FKVHPJJKJjr KK JQWOOTTNVQ 

H _S_K Q H 0 L 0 D VJL W Y Q D P C . J XLLL LL OXDS0_SRSJL 

I _S 0 X S N Z H A SJ X GH XEROQ P S_E_ MMJfUX0_PPY_0XZ_ 

JBBJIP_fiFJHD Y _ G K B_WTLFDU_Z NNJIOZO W_M 3LS G Q 

K QCBZEXQTX^ Z OCDHWJZTILZ 00 JJ U G D W Q_R VJ 

L JCQRQFVMLH AA KLB P C J 0_T X E PP UK_WPERXENF_ 

M S R Q E W M LNAE_BB HSP 0 P N M_D L M_ QQ _C C U G_D_ff P E U H 

N G S X E R 0 Z J S E 00 _G C K W D V O; S E RR Y B W E W V MJD W J 

0 _GVQWEJMKGH DD _ G S U G D P OlJT H X SS R Z X 


1620ia—38 
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Trilitbral Frequency Distributions 


abcdefghijklmnopqrstuvwxyz 

EB FF XK YB ES XK ZC VZ WQ ZC ZR DC HC HR MK -F YQ QT 

HZ FC OR NH VQ ZL JF MK NT QG 

XK WJ ZO QJ JZ NU 

WG WK ^ 

QK MO 


EV 

LH 

EK 


MC 

ES 


II 


A B C D 


GZ QB 
BJ JQ 
YW RV 
OD 
GK 
CU 


FGHIJKLMNOPQRSTUVWXYZ 

WU ZW GX GX IW KB GX LZ GF GX ZZ YX GQ KO 
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Initial Values From Assumptions 


Ko=Ep, Xo=Ep, and Do=Ep, from frequency considerations. 

346 456 901 

UGD=THE, PCJ=THE, and SEG=THE, from study of repetitions 
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Additional Values from Assumptions (I) 
2 

Refer to line DD in Figure 29, So assumed to be Np 


Refer to line M in figure 29, Ac assumed to be Wp 

9 10 1 2 3 4 6 

Then in lines C-D, A V K Z U G D is assumed to be WITH THE 
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Additional Values from Assumptions (II) 

Refer to Figure 30, line A, WFUPCFOCJY, assume to be BUT THOUGH 
--TTH - 

3 4 fi 6 

Refer to Figure 30, lines N and X, where repetition X E R 0 occurs, assume EACH 
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Additional Values From Assumptions (III) 


OPN—assume ING from repetition and frequency 
g 01 

HQZ—assume ING from repetition and frequency 

128468789 10 123486789 10 123486789 10 

A W P_C F 0 C J_Y P R C V OPN B L C W EE B_K DZFMTGQJ 
BUTTHOUGH ING E 
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E W I H U G 

D K Z U G D Y F W S CFBSCV X_C H_S HH Y T X C DJP M V L W 
THTHE U H GIN EE 

E G J X N L W Y_0 UX T ZTZSD M_X W C M II B G B_W W ^ R G N 

E E G E H 
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c Irom the initial and subsequent tcntatne identifications shown in Figures 29, 30, 31, 
and 32, the values obtained were arranged in the form of the secondary alphabets m a reconstruc¬ 
tion skeleton, shown in Figure 33 
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34 Fundamental theory — a In paragraph 31, methods of reconstructing pnmary com¬ 
ponents from secondary alphabets were given m detail It is necessary that those methods be 
fuUy understood before the foUowmg steps be studied It was there shown that the pnmary 
component can be one of a senes of equivalent pnmary sequences, all of which will give exactly 
similar results so far as the secondary alphabets and the cryptographic text are concerned 
It is not necessary that the identical or ongmal pnmary component employed m the crypto- 
graphmg be reconstructed, any eqmvalent pnmary sequence wiU serve The whole question is 
one of establishmg a sequence of letters the mterval between which is either identical with that 
m the ongmal pnmary component or else is an exact constant multiple of the mterval separatmg 
the letters m the ongmal pnmary component For example, suppose K P X N Q forms a 
sequence m the ongmal pnmary component Here the mterval between K and P, and P and X, 
X and N, N and Q is one, m an equivalent pnmary component, say the sequence K P X 
. N . Q, the mterval between K and Pis three, that between P and X also three, and so on, 
and the two sequences will yield the same secondary alphabets So long as the mterval between 
K and P, P and X, X and N, N and Q, , is a constant one, the sequence will be cryptographically 
eqmvalent to the ongmal pnmary sequence and will yield the same secondary alphabets as do 
those of the ongmal pnmary sequence However, m the case of a 26-letter component, it is 
necessary that this inter\al be an odd number other than 13, as these are the only cases which 
will 3 neld one unbroken sequence of 26 letters Suppose a secondary alphabet to be as follows 

, JPlam- ABCDEFGHIJKLMNOPQRSTUVWXYZ 

' ^jCipher_ X K N P 


It can be said that the pnmary component contains the foUowmg sequences 
XN KP NQ PX 

These, when united by means of their common letters, yield K P X N Q 
Suppose also the following secondary alphabet is at hand 

,„)Plam. _ ABODEPGHIJKLMNOPQRSTUVWXYZ 

®lcipher._ P X K N 

Here the sequences PN, XQ, KX, and NZ can be obtamed, which when muted yield the two se¬ 
quences KXQ and PNZ 

By a companson of the sequences K P X N Q, K X Q, and PNZ, one can estabhsh the 
foUowmg 

K P X N Q 
KXQ 
P . N Z 


It foUows that one can now add the letter Z to the sequence, makmg it K P X N Q Z 
b The reconstruction of a pnmary component from one of the secondary alphabets by the 
process given m paragraph 31 requires a complete or nearly complete secondary alphabet 
This IS at hand only ajter a cryptogram has been completely solved But if one could employ 
several very scant or skeletonized secondary alphabets simultaneously with the analysis of the 
cryptogram, one could then possibly build up a pnmary component from fewer data and thus 
solve the cryptogram much more rapidly than would otherwise be possible 

e Suppose only the cipher components of the two secondary alphabets (1) and (2) given 
above be placed mto juxtaposition Thus 

1 2 S 4 3 8 7 8 8 10 11 12 33 14 18 18 17 18 19 20 a 32 33 24 26 38 

(1) . X K N . P . 

(2J P X K N 

The sequences PX, XN, and KP are given by juxtaposition These, when umted, yield KPXN 
as part of the pnmary sequence It follows, therefore, that one can employ the cipher components 
oj secondan/ alphabets as sources oj independent data to assist m bmlding up the pnmary sequences 
The usefulness of this pomt wUl become clearer subsequently 

36 Application of principles — a Refer now to the reconstruction skeleton shown m 

Figure 33 Hereafter, m order to avoid all ambiguity and for ease m leference, the position of 

a letter m Figure 33 be indicated as stated m footnote 1, page 56 Thus, N (6-7) refers to 

the letter N m line 6 and m column 7 of Figure 33 
b (1) Now, consider the foUowmg pairs of letters 
E (0-5) J (6-5) 

G (0-7) N (6-7) 

jH (0-8) 0 (6-8) [ho of=HOP 

10 (0-15) F (6-15)]™’ ^ 

(One IS able to use the line marked zero m Figure 33 smce this is a mixed sequence shdmg agamst 
itselj) 
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(2) The immediate results of tlus set of values i\ill now be given Havmg HOF as a sequence, 
with EJ as belonging to the same displacement interval, suppose HOF and EJ are placed mto 
juxtaposition as portions of sliding components Thus 

Plain. HOF 

Cipher.... E J 

When Hp=Eo, then Op=Je 

(3) Kefer now to alphabet 10, Figure 33, where it is seen that Hp=Ec The denved value, 
0 p=>fci ccm immediately be inserted in the same alphabet and substituted in the cryptogram 

(4) The student may possibly get a clearer idea of the pnnciples involved if he will regard 
the matter as though he were dcahng with arithmetical proportion For instance, given any 
three terms in the proportion 2 8=4 16, the 4th term can easily be found Furthermore, given 
the pair of values on the left-hand side of the equation, one may find numerous pairs of 
values which may be inserted in the nght-hand side, or vice versa For instance, 2 8=4 16 
IS the same as 2 8=5 20, or 9 36=4 16, and so on An illustration of each of these pnnciples 
will now be given, refeience being made to Figure 33 As an example of the first prmciple, note 
that E (0-5) H (0-8)=J (6-5) 0 (6-8) Now find E (10-8) H (0-8)=*? (10-15) 0 (0-15) 
It IS clear that J may be inserted as the 3d term m this propoition, thus giving the 
important new value, 0p=J*, which is exactly what was obtained directly above, by means of 
the partial sliding components As an example of the second pnnciple, note the foUowmg pairs 

E(0-5) H(0-8) 

K (2-5) Z (2-8) 

D (5-5) C (5-8) 

J (6-5) 0 (6-8) 

These additional pairs are also noted 

K (1-20) Z (1-7) 

T ^0-2O) G (0-7) 

Therefore, E H=K Z=D C=J 0=T 6, and T may be mserted m position (4-5) 

c (1) Again, GN belongs to the same set of displacement-interval values as do EJ and HOF 
Hence, by superimposition 

Flam.... HOF 

Cipher.... G N 

(2) Referrmg to alphabet 4 when Hp=Gc, then Op=No Therefore, the letter N can be mserted 
m position (4-15) in Figure 33, and the value N 5 = 0 p can be substituted m the cryptogram 

(3) Furthermore, note the corroboiation found from this particular superimposition: 

H (0-8) G (0-7) 

0 (6-8) N (6-7) 

This checks up the value in alphabet 6, Gp=Nc 
d (1) Agam superimpose HOF and GN 

HOF 
G N 

(2) Note this corroboration 

0 (6-8) G (4-8) 

F (6-15) N (4-15) 

which has just been mserted m Figure 33, as stated above 
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e (1) AgB.iTi using HOF and EJ, but m a difiFerent supenmposition 
HOF 
E J 

(2) Refer now to H (9-9), J (9-8) Directly under these letters is found V (10-9), E (10-8) 

Therefore, the V can be added immediately before HOF, makmg the sequence V H 0 F 
y (1) Now take V H 0 F and juxtapose it with E J, thus 

V H 0 F 
E J 

(2) Refer now to Figure 33, and find the followmg 

V (10-9) E (10-8) 

H (9-9) J (9-8) 

0 (4r-9) G (4-8) 

I (0-9) H (0-8) 

(3) From the value 0 G it follows that G can be set next to J m E J Thus 

V H 0 F 
E J G 

(4) But G N already is known to belong to the same set of dioplacement-mterval values 
as E J Therefore, it is now possible to combme E J, J G, and G N mto one sequence, E J G N, 
yieldmg 

V H 0 F 
E J G N 

g (1) Refer now to Figure 33 

V (0-22) E (0-5) 

9 (1-22) G (1-5) 

9 (2-22) K (2-5) 

9 (3-22) X (3-5) 

? (5-22) D (5-5) 

9 (6-22) J (6-5) 

(2) The only values which can be inserted are 

0 (1-22) G (1-5) 

H (6-22) J (6-5) 

(3) This means that Vp=0, in alphabet 1 and that Vp=Hc m alphabet 6 There is one 0. 
m the frequency distnbution for alphabet 1, and no H# m that for alphabet 6 The frequency 
distnbution is, therefore, corroborative insofar as these values are concerned 

(A) (1) Further, takmg EJGNandVHOF, supenmpose them thus 
E J G N 
V H 0 F 


(2) Refer now to Figure 33 


E (0-5) H (0-8) 
G (1-5) ? (1-8) 
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(3) From the diagram of supenmposition the value G (1-6) F (1-8) can be inserted, which 
gives Hp=Fe in alphabet 1 

i (1) Agam, V H 0 F and E J G N are juxtaposed 
. V H 0 F 
E J G N 

(2) Refer to Figure 33 and find the foUowmg 

H (£1-8) G (4-8) 

A (0-1) E (4-1) 

This means that it is possible to add A, thus 

A V H 0 F 
E J G N 

(3) In the set there are also 

E (0-5) G (1-5) 

G (0-7) Z (1-7) 

Then m the supenmposition 

E J G N 
. E J G N 

It IS possible to add Z under G, makmg the sequence E J G N Z 

(4) Then taking 

A V H 0 F 
. E J G N Z . 

and referring to Figure 33 

H (0-8) N (0-14) 

0 (6-8) 9 (6-14) 

It will be seen that 0=Z from supenmposition, and hence m alphabet 6 Np=Ze, an important 
new value, but occumng only once m the cryptogram Has an error been made^ The work 
so far seems too corroborative m mterlockmg details to thinlr so 

J (1) The possibilities of the supenmposition and shdmg of the AVHOF and the EJGNZ 
sequences have by no means been exhausted as yet, but a httle different trail this tune may 
be advisable 

E (0-5) T (0-20) 

G (1-5) K (1-20) 

K (3-6) U (3-20) 

(2) Then 

EJGNZ 
. T K . . . 

(3) Now refer to the foUowmg 

E (0-5) K (2-5) 

N (0-14) S (2-14) 
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whereupon the value S can be inserted 

.EJGNZ 

. . . T K . S . . . 

k (1) Consider all the values based upon the displaeement mterval corresponding to JG 
J (6-5) G (l-5)-»J (9- 8) G (4- 8) 

N (6-7) Z (1-7) H (9- 9) 0 (4- 9) 

S (9-20) P (4-20)-^|S (2-14) P (5-14) 

Z (2- 8) C (5- 8) 

IK (2- 5) D (5- 5) 

(2) Smce J and G are sequent m the E J G N Z sequence, it can be said that all the letters 
of the foregoing pairs are also sequent Hence Z C, S P, and K D are available as new data 
These give EJGNZCandT KD SP 

(3) Now consider 

T (0-20) P (4-20) 

A (£t- 1) E (4- 1) 

H (£1- 8) G (4- 8) 

I (£1- 9) 0 (4- 9) 

1 i s 4 < e 

Now m the T K D S P sequence the mterval between T and P is T P 

Hence the mterval between A and E IS 6 also It follows therefore that the sequences A V H 0 F 
and E J G N Z C should be united, thus 

1 3 8 4 8 8 

. . AVHOF. EJGNZC 

(4) Corroboration is found m the mterval between H and G, which is also six The letter I 
can be placed mto position, from the relation I (0-9) 0 (4-9), thus 

1 3 8 4 8 8 

I .AVHOF EJGNZC .. 

I (1) From Figure 33 

H (£1- 8) Z (2- 8) 

E (0- 5) K (2- 5) 

N (0-14) S (2-14) 

U (0-21) F (2-21) 

(2) Smce mthel AVHOF EJGNZC sequence the letters H and Z are separated 
by 8 mtervals one can write 

1 3 8 4 8 8 7 8 

H Z 

. . E . . K 


N 


F 
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(3) Hence one can make the sequence 

1 a s 4 s « 7 8 
I AVHOF EJGNZC K 
Then I AVHOF EJGNZCT KD SP 

and UI AVHOF EJGNZCT KD SP 

13848678 13348478 

m (1) Subsequent derivations can be mdicated very briefly as follows 
E (0-5) C (0-3) 

D (5-5) R (5-3) 

1 3 3 4 a 6 7 8 9 10 11 12 13 14 16 16 17 18 19 30 31 22 23 34 28 36 

From UI AVHOF EJGNZCT KD SP 

one can wnte E C 

1 3 3 4 6 

and D R 

1 3 3 4 8 

makmg the sequence 

1 3 3 4 8 6 7 8 0 10 11 13 13 14 16 16 17 18 19 30 31 22 23 24 26 26 

UI AVHOF EJGNZCT KD SP R 

(2) Another derivation 

U (3-20) T (0-20) 

X (3- 5) E (0- 5) 

1 3 3 4 8 6 7 8 9 10 11 12 13 14 IS 18 17 18 19 30 21 22 23 24 28 26 

From UI AVHOF EJGNZCT KD SP R 

one can wnte 

U I T 

and EX 

making the sequence 

1 3 8 4 8 6 7 8 9 10 11 12 13 14 IS 16 17 18 19 20 21 22 23 34 28 26 

UI. AVHOF EJGNZCT KDXSP R 

(3) Another denvation 

E (0-5) G (1-5) 

B(0-2) W(l-2) 

From E J G 

one can wnte E G 

and then B W 

There is only one place where B W can fit, mz, at the end 

1 2 3 4 8 6 7 8 9 10 11 12 13 14 18 16 17 18 19 20 21 22 23 34 28 26 

UI AVHOF EJGNZCT KDXSPBRW 

n Only four letters remam to be placed into the sequence, mz, L, M, Q, and Y Their 
positions are easily foimd by application of the piimary component to the message The com¬ 
plete sequence is as follows 

1 2 3 4 8 6 7 8 9 10 11 12 13 14 18 16 17 18 19 20 21 22 23 24 28 26 

UIMYAVHOFLEJGNZCTQKDXSPBRW 
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Havmg the primary component fully constructed, decipherment of the cryptogram can be 
completed with speed and precision The text is as follows 


w 

F 

U 

P 

C 

F 

0 

C 

J 

Y 

R 

C 

V 

0 

P 

N 

B 

L 

C 

W 

B 

K 

D 

Z 

F 

M 

T 

G 

Q 

J 

B 

U 

T 

T 

H 

0 

U 

G 

H 

W 

P 

0 

S 

I 

N 

G 

T 

H 

E 

s 

S 

E 

L 

F 

W 

I 

L 

L 

G 

0 

G 

B 

Z 

D 

P 

F 

B 

0 

U 

0 

L 

Q 

z 

A 

A 

A 

M 

D 

C 

H 

L 

F 

U 

Y 

D 

T 

Z 

V 

H 

Q 

E 

C 

A 

N N 

0 

T 

A 

S 

Y 

0 

L 

A 

R 

S 

Y 

S 

T 

E 

M 

0 

U 

T 

B 

E 

C 

0 

M 

I 

N 

G 

R 

F 

T 

Z 

M 

Q 

M 

A 

V 

B 

Z 

Z 

C 

K 

Q 

0 

I 

K 

F 

Z 

G 

W 

N 

K 

X 

J 

T 

R 

N 

E 

T 

R 

E 

V 

I 

E 

W 

W 

I 

S 

H 

A 

L 

L 

T 

u 

R 

N 

A 

G 

A 

C 

0 

L 

D 

A 

N 

D 

L 

K 

Z 

U 

G 

D 

Y 

F 

T 

R 

w 

C 

F 

B 

S 

C 

V 

X 

C 

H 

Q 

Y 

T 

X 

C 

D 

P 

M 

V 

L 

W 

T 

H 

T 

H 

E 

M 

I 

N 

D 

s 

N 

U 

N 

C 

H 

A 

N 

G 

I 

N 

I 

F 

E 

L 

E 

S 

S 

M 

A 

S 

G J 

X 

N 

L 

W 

Y 

0 

U 

X 

Z 

T 

Z 

S 

D 

M 

X 

W 

C 

M 

B 

G 

B 

W 

W 

0 

Q 

R 

G 

N 

E 

Y 

E 

0 

U 

R 

P 

A 

S 

T 

G 

F 

A 

c 

E 

I 

N 

P 

E 

R 

S 

A 

N 

D 

T 

H 

E 

S 

0 

L 

I 

T 

W 

E 

P 

Q 

Z 

0 

K 

z 

R 

K 

U 

H 

E 

Q 

E 

D 

G 

X 

H 

H 

V 

L 

A 

Q Q 

V 

A 

V 

W 

E 

C 

A 

N 

T 

0 

A 

N 

E 

P 

E 

T 

U 

I 

T 

Y 

T 

0 

T 

A 

R 

S 

Y 

S 

T 

E 

M 

W 

I 

P 

R 

X 

C 

W 

L 

z 

I 

C 

W 

F 

K 

V 

H 

P 

J 

J 

K 

J 

Y 

J 

Q 

W 

0 

0 

T 

T 

N 

V 

Q 

X 

T 

E 

N 

T 

F 

0 

R 

E 

s 

H 

E 

S 

U 

N 

E 

A 

C 

H 

W 

L 

L 

C 

I 

R 

C 

L 

E 

U 

N 

G 

K 

Q 

H 

0 

L 

0 

D 

V 

M 

Y 

Q 

D 

P 

C 

J 

X 

L 

L 

L 

B 

K 

X 

D 

S 

0 

Z 

R 

S 

N 

E 

E 

0 

U 

R 

F 

u 

T 

U 

R 

I 

L 

L 

T 

H 

E 

N 

H 

A 

V 

S 

E 

E 

N 

G 

H 

0 

S 

T 

L 

G 

0 

X 

S 

N 

Z 

H 

A 

S 

E 

G 

H 

X 

E 

R 

0 

Q 

P 

S 

E 

Y 

U 

X 

0 

P 

P 

Y 

0 

X 

Z 

E 

W 

E 

C 

A 

N 

W 

I 

T 

H 

E 

R 

E 

A 

C 

H 

E 

D 

T 

H 

I 

K 

E 

I 

N 

S 

P 

A 

c 

E 

B 

B 

J 

I 

P 

Q 

F 

J 

H 

D 

G 

K 

B 

W 

T 

L 

F 

D 

U 

Z 

H 

0 

Z 

0 

W 

M 

X 

C 

G 


S 

C 

I 

E 

N 

T 

I 

F 

I 

C 

E 

E 

N 

D 

0 

F 

I 

T 

S 

E 

A 

W 

A 

I 

T 

I 

N 

G 

0 

N 

Q 

C 

B 

Z 

E 

X 

Q 

T 

X 

z 

0 

C 

D 

H 

W 

M 

Z 

T 

U 

Z 

J 

J 

U 

G 

J 

W 

Q 

R 

V 

M 

C 

0 

N 

F 

I 

D 

E 

N 

c 

E 

V 

0 

L 

U 

T 

I 

0 

N 

S 

E 

L 

Y 

T 

H 

E 

R 

E 

S 

U 

R 

J 

C 

Q 

R 

Q 

F 

V 

M 

L 

H 

K 

L 

B 

P 

C 

J 

0 

T 

X 

E 

U 

K 

W 

P 

E 

F 

X 

E 

N 

F 

L 

0 

0 

K 

F 

0 

R 

W 

A 

R 

T 

I 

N 

T 

H 

E 

u 

N 

c 

H 

R 

E 

C 

T 

I 

0 

N 

0 

F 

A 

S 

R 

Q 

E 

W 

M 

L 

N 

A 

E 

H 

S 

P 

0 

P 

N 

M 

D 

L 

M 

C 

C 

U 

G 

D 

W 

P 

E 

U 

H 

D 

T 

0 

A 

T 

I 

M 

E 

W 

H 

A 

N 

G 

I 

N 

G 

s 

T 

A 

R 

N 

0 

T 

H 

E 

R 

C 

0 

S 

M 

G 

S 

X 

E 

R 

0 

Z 

J 

S 

E 

G 

C 

K 

W 

D 

V 

B 

L 

S 

E 

Y 

B 

W 

E 

W 

V 

M 

D 

Y 

J 

E 

N 

E 

A 

C 

H 

0 

F 

T 

H 

E 

0 

F 

D 

E 

A 

T 

H 

T 

H 

I 

C 

C 

A 

T 

A 

S 

T 

R 

0 

G 

V 

Q 

W 

E 

J 

M 

K 

G H 

G 

S 

U 

G 

D 

P 

0 

T 

H 

X 

R 

Z 

X 








E 

B 

0 

D 

I 

E 

S 

C 

0 

M 

E 

N 

T 

H 

E 

S 

U 

N 

I 

T 

P H 

E 
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0 The pnmary component appears to be a random-mixed sequence, no key word is to be 
found, at least none reappears on experimentation with vaiious hypotheses as to eiiciphenng 
equations Nevertheless, the random construction of the pnmary component did not compli¬ 
cate or retard the solution 













SECTION IX 


REPEATING-EEY SYSTEMS WITH MIXED CIPHER ALPHABETS, III 


Solution of messages enciphered by known primary components... 37 

Solution of repeatmg-key ciphers m which the identical mi\ed components proceed in opposite directions_ 38 

Solution of repeating-koy ciphers iii which the primary components are different mixed sequences_ 39 

Solution of subsequent messages after the primary components have been recovered_ 40 

37 Solution of subsequent messages enciphered by the same primary components —a In 


the discussion of the methods of solving repeatmg-key ciphers using secondary alphabets derived 
from the shding of a mixed component against the normal component (Section V), it was shown 
how subsequent messages enciphered by the same pair of primary components but with different 
keys could be solved by apphcation of principles mvolving the completion of the plam-component 
sequence (paragraphs 23, 24) The present paragraph deals with the apphcation of these same 
prmciples to the case where the primary components are identical mixed sequences 

h Suppose that the following primary component has been reconstructed from the analysis 
of a lengthy cryptogram 

QUESTIONABLYCDFGHJKMPRVWXZ 

A new message exchanged between the same correspondents is intercepted and is suspected 
of having been encipheicd by the same pnniaiy components but with a different key The 
message is as follows 

N F W W P N 0 M K I W P I D S C A A E T Q V Z S E 

Y 0 J SC A A A F G R V N H D W D S C A E G N F P 

FOEMT HXLJW PNOMK I QDBJ I V N H L 

TFNCS BGCRP 

c Factoring discloses that the period is 7 letters The text is transcribed accordingly, and 
IS as follows 

N F W W P N 0 

M K I W P I D 

S C A A E T Q 

V Z S E Y 0 J 

S C A A A F G 

R V N H D W D 

S C A E G N F 

P F 0 E M T H 

X L J W P N 0 

M K I Q D B J 

I V N H L T F 

N C S B G C R 

P 

Fiavsi 37 

(78) 
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d The letters belonging to the same alphabet are then employed as the imtial letters of 
completion sequences, m the manner shown in paragraph 23e, usmg the already reconstructed 
primary component The completion diagrams for the first five letters of the first three alphabets 
are as follows 


Alphxbit 1 

N M S V S 

A P T W T 

B R I X I 

L V 0 Z 0 

Y W N Q N 

C X A U A 

D Z B E B 

F Q L S L 

G U Y T Y 

*H E C I C 

J S D 0 D 

K T F N F 

M I G A G 

P 0 H B H 

R N J L J 

V A K Y K 

W B M C M 

X L P D P 

Z Y R F R 

Q C V G V 

U D W H W 

E F X J X 

S G Z K Z 

T H Q M Q 

I J U P U 

0 K E R E 


Alphabbt t 

F K C Z C 
G M D Q D 
H P F U F 
J R G E G 
K V H S H 
M W J T J 
P X K I K 
R Z M 0 M 

V Q P N P 
W U R A R 
X E V B V 
Z S W L W 
Q T X Y X 
U I Z C Z 
E 0 Q D Q 
S N U F U 
T A E G E 
1 B S H S 
0 L T J T 
N Y I K I 

*A C 0 M 0 
B D N P N 
L F A R A 

Y G B V B 
C H L W L 
D J Y X Y 

Fioubi 38 


AtPBABBT 3 

w I A S A 
X 0 B T B 
Z N L I L 
Q A Y 0 Y 
U B C N C 
E L D A D 
S Y F B F 
T C G L G 
I D H Y H 
0 F J C J 
N G K D K 
A H M F M 
B J P G P 
L K R H R 
Y M V S V 
C P W K W 
D R X M X 
F V Z P Z 
G W Q R Q 
H X U V U 
J Z E W E 
K Q S X X 
M U T Z T 
P E I Q I 
R S 0 U 0 
*V T N E N 


e FyarmniTyg the successive generatives to select the ones showmg the best assortment of 
high-frequency letters, those marked in Figure 38 by asterisks are chosen These are then assem¬ 
bled m columnar fashion and yield the foUowmg plain text 


H A V 
EOT 
CON 
I M E 
CON 


Fioubi 30 












/ The corresponding key-letters are sought, using enciphering equations ek/«=0i/p, ^/j,= 
Gc/o, and are found to be JOU, which suggests the keyword JOURNEY Testing the key-letters 
RNEY for alphabets 4, 5, 6, and 7, the following results are obtained 

1 2 3 4 s « 7 

JOURNEY 
N F W W P N 0 
H A V E D I R 

S C A A E T Q 

E C T E D S E 

The message may now be completed with ease It is as follows 

JOURNEY JOURNEY 

HAVEDIR SAINCEI 

NFWWPNO PFOEMTH 

ECTEDSE NTHEDIR 

MKIWPID XLJWPNO 

CONDREG ECTIONO 

SCAAETQ MKIQDBJ 

IMENTTO FHORSES 

VZSEYOJ IVNHLTF 

CONDUCT HOEFALL 

SCAAAFG NCSBGCR 

THORORE S 

RVNHDWD P 

C 0 N N A I S 
S C A E G N F 

FiauBa41 

38 Solution of repeatmg-key ciphers m which the identical mixed components proceed m 
opposite directions.—The secondary alphabets m this case (paragraph 6, Case B (3) (a) (II) 
are reciprocal The steps m solution are essentially the same as m the precedmg case (para¬ 
graph 28), the prmciples of mdirect symmetry of position can also be apphed with the necessary 
modifications mtroduced by virtue of the reciprocity existmg within the respective secondary 
alphabets (paragraph 31p) 

39 Solution of repeatmg-key ciphers in which the pnmary components are different mixed 
sequences.—This is Case B (3) (b) of paragraph 6 The steps in solution are essentially the same 
as m paragraphs 28 and 31, except that m applyir^ the principles of mdirect symmetry of posi¬ 
tion it IS necessary to take cognizance of the fact that the primary components are different 
mixed sequences (paragraph 31g) 

40 Solution of subsequent messages after the primary components have been recovered.— 
a In the case m which the primary components are identical mixed sequences proceeding m 
opposite directions, as well as m that m which the pnmary components are different mixed 
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sequences, the solution of subsequent messages * is a relatively easy matter In both cases, how¬ 
ever, the student must remember that before the method illustrated m paragraph 37 can be 
apphed it is necessary to convert the cipher letters mto their plam-component equivalents 
before completing the plam-component sequence From there on, the process of selectmg and 
assembling the proper generatnces is the same as usual 

b Perhaps an example may be advisable Suppose the enemy has been found to be using 
primary components based upon the keyword QUESTIONABLY, the plam component ru nn i ng 
from left to right, the cipher component m the reverse direction The following new message 
has arrived from the mtercept station 


M V X 0 X 


^ I Y Z 

N L W Z H 

0 X I E 0 

0 0 E P Z 

F X S R X 

E 

J B S H 

B 0 N A U_ 

R A P Z I 

N R_A M_V» 

X 0 X A I 

J 

Y X W F 

ENDOW 

J E R C U_ 

R A L V B_, 

^ A Q U W 

J 

W X Y I 

D G R K D 

Q B D R M 

Q E C Y V 

Q W 

1 8 8 4 8 6 





1 2 8 4 5 8 

M V X 0 X B 





0 S U M U H 

Z I Y Z N L 





Q P F Q K G 


W Z H 0 X I 
E 0 0 0 E P 
Z F X S R X 
E J B S H B 
0 N A U R A 
P Z I N R A 
M V X 0 X A 
I J Y X W F 
K N D 0 W J 
E R C U R A 
L V B Z A Q 
U W J W X Y 
I D G R K D 
Q B D R M Q 
E C Y V Q ff 


c Factoring discloses that the period is 6 and the mes¬ 
sage IS accordingly transcribed mto 6 columns. Fig 42 
The letters of these columns are then converted mto them 
plmn component eqmvalents by juxtaposmg the two pn¬ 
mary components at any point of comcidence, for ex¬ 
ample Qp=Z, The converted letters are shown m Fig 43 
The letters of the mdmdual columns are then used as the 
imtial letters of completion sequences, using the 
QUESTIONABLY pnmary sequence The final step is the 
selection and assembling of the selected generatnces 
The results for the first ten letters of the first three columns 
are shown below 


E Q B M U P 
W M M M W I 
Q Y U V T U 
W A H V B H 
M K J X T J 
I Q P K T J 
0 S U M U J 
P A F U E Y 
N K C M E A 
W T D X T J 
G S H Q J Z 
X E A E U F 
P C L T N C 
Z H C T 0 Z 
W D F S Z E 


» That 18, intercepted after the primary components have been reconstructed and enciphered by 

keys different from those used in the messages upon which the reconstruction of the pnmary components was 
accomplished 
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OOWIIH 1 

OQEWQWMIOP 

NUSXUXPONR 

AETZEZRNAV 

BSIQSQVABW 

LTOUTUWBLX 

YINEIEXLYZ 

COASOSZYCQ 

DNBTNTQCDU 

♦FALIAIUDFE 

GBYOBOEFGS 

HLCNLNSGHT 

JYDAYATHJI 

KCFBCBIJKO 

MDGLDLOKMN 

PFHYFYNMPA 

RGJCGCAPRB 

VHKDHDBRVL 

WJMFJFLVWY 

XKPGKGYWXC 

ZMRHMHCXZD 

QPVJPJDZQF 

URWKRKFQUG 

EVXMVMGUEH 

SWZPWPHESJ 

TXQRSRJSTK 

IZUVZVKTIM 


CoLtnCN 3 

SPQMYAKQSA 

TRUPCBMUTB 

♦IVERDLPEIL 

OWSVFYRSOY 

NXTWGCVTNC 

AZIXHDWIAD 

BQOZJFXOBF 

LUNQKGZNLG 

YEAUMHQAYH 

CSBEPJUBCJ 

DTLSRKELDK 

FIYTVMSYFM 

GOCIWPTCGP 

HNDOXRIDHR 

JAFNZVOFJV 

KBGAQWNGKW 

MLHBUXAHMX 

PYJLEZBJPZ 

RCKYSQLKRQ 

VDMCTUYMVU 

WFPDIECPWE 

XGRFOSDRXS 

ZHVGNTFVZT 

QJWHAIGWOI 

UKXJBOHXUO 

EMZKLNJZEN 

Fiqdbs 44 


COLVKN 3 

UFBMUHJPUF 

EGLPEJKREG 

SHYRSKMVSH 

TJCVTMPWTJ 

IKDWIPRXIK 

OMFXORVZOM 

NPGZNVWQNP 

ARHQAWXUAR 

BVJUBXZEBV 

LWKELZQSLW 

YXMSYQUTYX 

CZPTCUEICZ 

DQRIDESODQ 

FUVOFSTNFU 

GEWNGTIAGE 

HSXAHIOBHS 

JTZBJONLJT 

KIQLKNAYKI 

MOUYMABCMO 

PNECPBLDPN 

♦RASDRLYFRA 

VBTFVYCGVB 

WLIGWCDHWL 

XYOHXDFJXY 

ZCNJZFGKZC 

QDAKQGHNQD 


Columnar assembbng of selected generatrices gives what is shown in Fig 45 


FIR 
A V A 
L E S 
I R D 
ADR 
ILL 
U P Y 
D E F 
FIR 
E L A 


Figure 43 
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d The key letters are sought, and found to be MUM, which suggests NUMBER The entire 
message may now be read with ease It is as follows 

NUMBER NUMBER 

FIRSTC ELAYIN 

MVXOXB IJYXWF 

AVALRY GPOSIT 

ZIYZNL KNDOWJ 

LESSTH lONAND 

WZHOXI ERCURA 

IRDSQU WILLPR 

EOOOEP LVBZAQ 

ADRONW OTECTL 

ZFXSRX UWJWXY 

ILLOCC EFTFLA 

EJBSHB IDGRKD 

UPYAND NKOFBR 

ONAURA QBDRMQ 

DEFEND IGADEX 

PZINRA ECYVQW 

F I R S T D 
M V X 0 X A 


e If the primary components are different imxed sequences, the procedure is identical vith 
that just mdicated The important point to note is that one must not fail to convert the letters 
into their plain-component equivalents before the completion-sequence method is applied 









Section X 

REPEATING-KEY SYSTEMS WITH MIXED CIPHER ALPHABETS, IV 

Paragraph 


General remarks. 41 

Deriving the secondary alphabets, the pnmary components, and the key, given a cryptogram with its 

plain text _ 42 

Deriving the secondary alphabets, the primary components, and the keywords for messages, given two or 

more cryptograms in different keys and suspected to contain identical plain text_ 43 

The case of repeating-key systems. 44 

The case of identical messages enciphered by keywords of different lengths .. _ 46 

Concluding remarks_ 46 


41 General remarks —The preceding three sections have been devoted to an elucidation 
of the general principles and procedure m the solution of typical cases of repeatmg-key ciphers 
This section will be devoted to a consideration of the vanations in cryptanalytic procedure arising 
from special circumstances It may be well to add that by the designation “special circum¬ 
stances” it IS not meant to imply that the latter are necessarily unusual circumstances The 
student should alumys be on the alert to seize upon any opportunities that may appear in which he may 
apply the methods to he described In practical work such opportumties are by no means rare and 
are seldom overlooked by competent cryptanalysts 

42 Denvmg the secondary alphabets, the pnmary components, and the key, given a 
cryptogram with its plam text —a It may happen that a cryptogram and its equivalent plam 
text are at hand, as the result of capture, pilferage, compiomise, etc This, as a general rule, 
affords a very easy attack upon the whole system 

b Takmg first the case where the plam component is the normal alphabet, the cipher com¬ 
ponent a mixed sequence, the first thmg to do is to write out the cipher text with its letter-for- 
letter decipherment From this, by a slight modification of the pnnciples of “factonng”, one dis¬ 
covers the length of the key It is obvious that when a word of three or four letters is enciphered 
by the same cipher text, the mterval between the two occurrences is almost certamly a multiple 
of the length of the key By noting a few recurrences of plain text and cipher letters, one can 
quickly determme the length of the key (assuimng of course that the message is long enough to 
afford sufficient data) Having determined the length of the key, the message is rewritten accord- 
mg to its periods, with the plam text hkewise m periods under the cipher letters From this 
arrangement one can now reconstruct complete or partial secondary alphabets If the secondary 
alphabets are complete, they will show direct symmetry of position, if they are but fragmentary 
m several alphabets, then the pnmary component can be reconstructed by the apphcation of the 
principles of direct symmetry of position 

e If the plam component is a mixed sequence, and the cipher component the normal (direct or 
reversed sequence), the secondary alphabets will show no direct symmetry unless they are ar¬ 
ranged m the form of deciphenng alphabets (that is. A, Zo above the zero line, with their 
equivalents below) The student should be on the lookout for such cases 

d (1) If the plam and cipher pnmary components are identical mixed sequences proceeding 
m the same direction, the secondary alphabets will show mdirect symmetry of position, and they 
can be used for the speedy reconstruction of the pnmary components (Paragraph 31o to o) 

( 84 ) 
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(2) If the plam the cipher pnmary components are identical mixed sequences proceedmg 
m opposite durections, the secondary alphabets will be completely reciprocal secondary alphabets 
and the pnmary component may be reconstructed by applymg the pnnciples outlmed m para¬ 
graph 3 Ip 

(3) If the plam nnH the cipher pnmary components are different mixed sequences, the 
secondary alphabets will show indirect symmetry of position and the pnmary components may 
be reconstructed by appljung the pnnciples outlmed m paragraph 312 

« In aU the foregoing cases, after the pnmary components have been reconstructed, the 
keys can be readily recovered 

43, Denvmg the secondary alphabets, the pnmary components, and the keywords for 
messages, given two or more cryptograms in different keys and suspected to contam identical 
piaiTi text —a The simplest case of this kmd is that mvolvmg two monoalphabetic substitution 
ciphers with mixed alphabets denved from the same pair of shdmg components An understand- 
mg of this case is necessary to that of the case mvolvmg repeatmg-key ciphers 

b (1) A message is transmitted from station A to station B B then sends A some operatmg 
signals which mdicate that B cannot decipher the message, and soon thereafter A sends a second 
message, identical m length with the first This leads to the suspicion that the plain text of both 
messages is the same The mtercepted messages are superimposed Thus 

f I Vg.5 t UAD/S-ONSA-U STp t I f'M* VhPl^ ‘ 7 A '''/A . v'f ' rC 

1 NXGRV MPUOF ZQVCP VWEP?X QDZVX WXZQE TBDSP WXJK RFZWH ZUWLU lYVZQ FXOAR 

2 EMLHJ FGVUB PRJNG JKWHM RAPJM KMPRW ZTAXG JJMCD HBPKY PVKIV QOJPR BMUSH 

(2) Imtiatmg a fhmn of cipher-text eqmvalents from message 1 to message 2, the following 
complete sequence is obtamed 

1 2 3 4 B « 7 8 B 10 11 13 13 14 IS 16 17 18 19 20 21 22 23 24 25 26 

NEWKDASXMFBTZPGLIQRHYOUVJC 

(3) Experimentation along already-mdicated Imes soon discloses the fact that the foregoing 
component is an equivalent pnmary component of the origmal pnmary based upon the keyword 
QUESTIONABLY, decimated on the 21st mterval Let the student decipher the cryptogram 

(4) The foregoing example is somewhat artificial m that the plam text was consciously 
selected with a view to makiTig it contam every letter of the alphabet The purpose m domg 
thin w'as to permit the construction of a complete cham of eqmvalents from only two short 
messages, in order to give a smiple illustration of the pnnciples mvolved If the plam-text message 
does not contam every letter of the alphabet, then only partial chams of eqmvalents can be con¬ 
structed These may be muted, if circumstances will permit, by recourse to the various prm- 
ciples elucidated m paragraph 31 

(5) The student should carefully study the foregoing example m order to obtam a thorough 
comprehension of the reason why it was possible to reconstruct the pnmary component from the 
two cipher messages without having any plam text to begm with at all Since the plam text of 
both messages is the same, the relative displacement of the pnmary components in the case of 
message 1 differs from the relative displacement of the same pnmary components m the case of 
message 2 by a fixed mterval Therefore, the distance between N and E (the first letters of the 
two messages), on the p nmar y component, regardless of what plam-text letter these two 
cipher letters represent, is the same as the distance between E and W (the 18th letters), W and K 
(the 17th letters), and so on Thus, this fixed mterval permits of estabhshing a complete cham 
of letters separated by constant mtervals and this cham becomes an equivalent pnmary com¬ 
ponent. 












44 The case of repeatmg-key systems —a With the foregoing basic principles m mind 
the student is ready to note the procedure m the case of two repeatmg-key ciphers having identical 
plam texts First, the case in which both messages have keywords of identical length but different 
compositions will be studied 

b (1) Given the following two cryptograms suspected to contain the same plam text 
Mbssage 1 

YHYEX UBUKA PVLLT ABUVV DYSAB 

PCQTU NGKFA ZEFIZ BDJEZ ALVID 

TROQS UHAFK 

Message 2 

CGSLZ QUBMN CTYBV HLQFT FLRHL 

MTAIQ ZWMDQ NSDWN LCBLQ NETOC 

VSNZR BJNOQ 

(2) The first step is to try to determine the length of the period The usual method of 
factormg cannot be employed because there are no long repetitions and not enough repetitions 
even of digraphs to give any convincing mdications However, a subterfuge will be employed, 
based upon the theory of factoring 

c (1) Let the two messages be superimposed 

1 2 3 4 S 6 7 8 9 10 11 12 13 14 IS 18 17 18 19 20 

1 YHYEXUBUKAPVLLTABUVV 

2 CGSLZQUBMNCTYBVHLQFT 

21 22 23 24 25 28 27 28 29 30 31 32 33 34 35 36 37 38 39 40 

1 DYSABPCQTUNGKFAZEFIZ 

2 FLRHLMTAIQZWMDQNSDWN 

41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 80 

1 BDJEZALVIDTROQSUHAFK 

2 LCBLQNETOCVSNZRBJNOQ 

4 44 

E E 

(2) Now let a search be made of cases of identical superrmposition For example, L and L 

6 18 30 

U U U 

are separated by 40 letters, Q, Q, and Q are separated by 12 letters Let these mtervals between 
identical supenmpositions be factored, just as though they were ordmary repetitions That 
factor which is the most frequent should correspond with the length of the penod for the following 
reason If the penod is the same and the plam text is the same m both messages, then the con¬ 
dition of identity of superrmposition can only be the result of identity of encipherments by 
identical cipher alphabets This is only another way of saymg that the same relative position m 
the keying cycle has been reached in both cases of identity Therefore, the distance between 
identical supenmpositions must be either equal to or else a multiple of the length of the penod 
Hence, factormg the mtervals must yield the length of the penod The complete hst of mtervals 
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and factors apphcable to cases of identical superimposed pairs is as follows (factors above 12 
are omitted) 


Kepetltlon 

Intenral 

Fsetors 

Kepetltlon 

Interral 

Faetors 

Ist EL to 2d EL. - 

40 

2, 4, 5, 8, 10 

1st TV to 2d TV. .. 

36 

2, 3, 4, 6, g, 12 

Ist UQ to 2d UQ. 

12 

2, 3, 4, 6, 12 

1st AH to 2d AH. .... 

8 

2, 4, 8 

2d UQ to 3d UQ 

12 

2, 3, 4, 6, 12 

Ist BL to 2d BL .. 

8 

2, 4, 8 

1st UB to 2d UB 

48 

2, 3, 4, 6, 8, 12 

2d BL to 3d BL 

16 

2, 4, 8 

Ist KM to 2d KM. 

24 

2, 3, 4, 6, 8, 12 

Ist SR to 2d SR. .. 

32 

2, 4, 8 

1st AN to 2d AN . 

36 

2, 3, 4, 6, 9, 12 

lBtFDto2dFD. .. 

4 

2 , 4 

2d AN to 3d AN 

12 

2, 3, 4, 6, 12 

Ist ZN to 2d ZN . 

4 

2 , 4 

1st VT to 2d VT _ 

8 

2, 4, 8 

Ist DC to 2d DC.. . 

8 

2, 4, 8 

2d VT to 3d VT.. 

28 

2, 4, 7 





(3) The factor 4 is the only one common to eveiy one of these mtervals and it may be taken 
as beyond question that the length of the penod is 4 

d Let the messages now be supenmposed accordmg to their penods 

1234 1234 1234 1234 1234 1234 1234 


1 

Y H Y E 

X U B U 

K A P V 

L L T A 

B U V V 

D Y S A 

B P C Q 

2 

C G S L 

Z Q U B 

M N C T 

Y B V H 

L Q F T 

F L R H 

L M T A 

1 

TUNG 

K F A Z 

E F I Z 

B D J E 

Z A L V 

I D T R 

0 Q S U 

2 

I Q Z W 

M D Q N 

SOWN 

L C B L 

Q N E T 

0 C V S 

N Z R B 


1 H A F K 

2 J N 0 Q 

e (1) Now distnbute the supenmposed letters into a reconstruction skeleton of “secondary 
alphabets ’’ 

Thus 


0 

A 

B 

C 

D 

E 

F 

G 

H 

I 

J 

K 

L 

M 

N 

0 

P 

Q 

R 

S 

T 

u 

V 

W 

X 

Y 

Z 

1 

2 


L 


F 

S 



J 

0 


M 

Y 



N 





I 




z 

C 

Q 

N 



C 


D 


G 




B 




M 

z 




Q 




L 


3 

Q 

U 

T 



0 



W 

B 


E 


Z 


C 

1 


R 

V 


F 



S 


4 

H 




L 


W 




Q 






A 

S 



B 

T 




N 


(2) By the usual methods, construct the pnmaiy or an equivalent pnmary component 
Takmg hnes 0 and 1, the following sequences are noted 

BL, DF, ES, HJ, 10. KM, LY, ON, TI, XZ, YC. ZQ. 

which, when umted by means of common letters and study of other sequences, yield the complete 
ongmal pnmary component based upon the keyword QUESTIONABLY 

QUESTIONABLYCDFGHJKMPRVWXZ 

(3) The fact that the pair of hnes with which the process was commenced yield the ongmal 
pnmary sequence is purely accidental, it might have just as well yielded an equivalent pnmary 
sequence. 
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y (1) Having the primary component, the solution of the messages is now a relatively simple 
matter An apphcation of the method elucidated m paragraph 37 is made, mvolvmg the comple¬ 
tion of the plain-component sequence for each alphabet and selectmg those generatrices which 
contain the best assortments of high-frequency letters Thus, usmg Message 1 


Fntsi Alphibit Sxcond Alprabxt Thibd Alphabit Vovnm Alpbabxt 


YX 

JL 

L 

B 

H 

U 

A 

Ji 

JZ 

Y B P T V 

E 

Ji 

V A V 

C 

Z 

M 

Y 

L 

J 

E 

B 

Y 

E 

C 

L R I W 

S 

E 

W B W 

D 

Q P 

C 

Y 

K 

S 

L 

C 

S 

D Y V 0 X 

T 

S 

X L X 

F 

U 

R 

D 

C 

M 

T 

Y 

D 

T 

F 

C W N Z 

I 

T 

Z Y Z 

G 

E 

V 

F 

D 

P 

I 

C 

F 

I 

G 

D X A Q 

0 

I Q C Q 

H 

S 

W 

G 

F 

R 

0 

D 

G 

0 

H 

F Z B U 

N 

0 

U D U 

J 

T 

X 

H 

G 

V 

N 

F 

H 

N 

J 

G Q L E 

*A 

N 

E F E 

K 

I 

z 

J 

H 

W 

A 

G 

J 

A 

K 

H U Y S 

B 

A 

S G S 

M 

0 

Q K 

J 

X 

B 

H 

K 

B 

M J E C T 

L 

B 

T H T 

P 

N 

U 

M 

K 

z 

L 

J 

M 

L 

P 

K S D I 

Y 

L 

I J I 

R 

A 

E 

P 

M 

Q Y 

K 

P 

Y 

R 

M T F 0 

C 

Y 

0 K 0 

V 

B 

S 

R 

P 

U 

C 

M 

R 

C 

V 

P I G N 

D 

C 

N M N 

W 

L 

T 

V 

R 

E 

D 

P V 

D 

W 

R 0 H A 

F 

D 

A P A 

X 

Y 

I 

W 

V 

S 

F R W 

F 

X 

V N J B 

G 

F 

B R B 

z 

C 

0 

X 

W 

T 

G V 

X G 

Z 

W A K L 

H 

G 

L V L 

Q D 

N 

z 

X 

I 

H 

w 

Z 

H 

Q X B M Y 

J 

H 

Y W Y 

U 

F A Q Z 

0 

J 

X Q J 

U 

Z L P C 

K 

J 

C X C 

E 

G 

B 

u Q 

N 

K 

Z 

U 

K 

E 

Q Y R D 

M 

K 

D Z D 

S 

H 

L 

E 

u 

A M Q E 

M 

S 

U C V F 

P 

M 

F Q F 

T 

J 

Y 

S 

E 

B 

P 

U 

S 

P 

T 

E D W G 

R 

P 

G U G 

I 

K 

C 

T 

S 

*L 

R 

E 

T 

R 

I 

S F X H 

V 

R 

H E H 

0 

M 

D 

I 

T 

Y 

V 

S 

I 

V 

0 

T G Z J 

W 

V J S J 

N 

P 

F 

0 

I 

C 

W 

T 

0 

W 

N 

I H Q K 

X 

W K T K 

*A 

R 

G 

N 

0 

D 

X 

I 

N 

X 

A 

0 J U M 

z 

X 

M I M 

B 

V 

H 

A 

N 

F 

z 

0 

A 

z 

B 

N K E P 

Q Z 

POP 

L 

W 

J 

B 

A 

G 

Q N 

B Q 

*L 

A M S R 

U Q R N R 


Figvbb 48 


(2) The selected generatrices (those marked by asterisks m Fig 48) are assembled m 
columnar manner 

ALLA 
R R A N 
G E M E 
N T S P 
0 R R E 


Tiovrb 48 


(3) The key letters axe sought and give the keyword SOUP The plam text for the second 
message is now known, and by reference to the cipher text and the primary components, the 
keyword for this message is found to be TIME The complete texts are as follows 


SOUP 

TIME 

ALLA 

ALLA 

Y H Y E 

C G S L 

R R A N 

R R A N 

X U B U 

Z Q U B 

G E M E 

G E M E 

K A P V 

M N C T 

N T S F 

N T S F 

L L T A 

Y B V H 

0 R R E 

0 R R E 

B U V V 

L Q F T 

LIEF 

LIEF 

D Y S A 

F L R H 

0 F Y 0 

0 F Y 0 

B P C Q 

L M T A 

U R 0 R 

U R 0 R 

TUNG 

I Q Z W 

G A N I 

G A N I 

K F A Z 

M D Q N 

Z A T I 

Z A T I 

E F I Z 

S D W N 

0 N H A 

0 N H A 

B D J E 

L C B L 

V E B E 

V E B E 

Z A L V 

Q N E T 

E N S U 

E N S U 

I D T R 

0 C V S 

S P E N 

S P E N 

0 Q S U 

N Z R B 

D E D X 

D E D X 

H A F K 

J N 0 Q 


FlOUBI iO 


46 The case of identical messages enciphered by keywords of different lengths —a In the 
foregoing case the keywords for the two messages, although different, were identical m length 
When this is not true and the keywords are of different lengths, the procedure need be only 
slightly modified 
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6 Given the following two cryptograms suspected of containmg the same plam-text en¬ 
ciphered by the same primary components but with diflferent keywords of different lengths, solve 
the messages 

Message No 1 


V 

M 

Y 

Z 

G 

E 

A 

U 

N 

T 

P 

K F A Y 

J I Z 

M 

B 

U 

M 

Y 

K 

B 

V 

F 

I 

V V 

s 

E 

0 

A 

F 

S 

K 

X 

K 

R 

Y 

W C A C 

Z 0 R 

D 

0 

z 

R 

D 

E 

F 

B 

L 

K F E 

s 

M 

K 

S 

F 

A 

F 

E 

K 

V 

Q 

U R C M 

Y Z V 

0 

X 

V 

A 

B 

T 

A 

Y 

Y 

U 0 A 

Y 

T 

D 

K 

F 

E 

N 

W 

N 

T 

D 

B 

Q K U 

L A J 

L 

z 

I 

0 

U 

M 

A 

B 

0 

A 

F S 

K 

X 

Q 

P 

U 

Y 

M 

J 

P 

W 

Q 

T 

D B T 

0 & I 

Y 

s 

M 

I 

Y 

K 

U 

R 

0 

G 

M W 

C 

T 

M 

Z 

Z 

V 

M 

V 

A 

J 




























Message No 2 












Z 

G 

A 

M 

W 

I 

0 

M 

0 

A 

C 

0 

DBA 

C L R 

L 

p 

M 

0 

Q 

0 

J 

E 

M 

0 

Q U 

D 

H 

X 

B 

Y 

U 

Q 

M 

G 

A 

U 

V 

G L Q 

DBS 

P 

u 

0 

A 

B 

I 

R 

P 

W 

X 

Y M 

0 

G 

G 

F 

T 

M 

R 

H 

V 

F 

G 

W 

K N I 

V A U 

P 

F 

A 

B 

R 

V 

I 

L 

A 

Q 

E M 

Z 

D 

J 

X 

Y 

M 

E 

D 

D 

Y 

B 

0 

S V M 

P N L 

G 

X 

X 

D 

Y 

D 

0 

P 

X 

B 

Y U 

Q 

M 

N 

K 

Y 

F 

L 

U 

Y 

Y 

G 

V 

PVR 

D N C 

Z 

E 

K 

J 

Q 

0 

R 

W 

J 

X 

R V 

G 

D 

K 

D 

S 

X 

C 

E 

E 

C 

















c The messages are long enough to show a few short repetitions which permit factoring 
The latter discloses that Message 1 has a period of 4 and Message 2, a period of 6 letters The 
messages are superimposed, with numbers markmg the position of each letter m the corresponding 
period, as shown below 


123412341234123412341234 


No 

1 

V 

M 

Y 

z 

G 

E 

A 

U 

N 

T 

P 

K 

F 

A 

Y J 

I 

z 

M 

B 

u 

M 

Y 

K 

No 

2 

Z 

G 

A 

3 

M 

4 

W 

5 

I 

0 

1 

M 

2 

0 

3 

A 

4 

C 

5 

0 

8 

D 

H 

2 

A C 

L 

R 

6 

L 

P 

M 

0 

Q 

0 



1 

2 

3 


1 

2 

3 




3 


1 

2 

3 

4 

1 

2 

3 


1 

2 

3 


No 

1 

B 

V 

F 

I 

V 

V 

s 

E 

0 

A 

F 

s 

K 

X 

K R 

Y 

W 

c 

A 

C 

z 

0 

R 

No 

2 

J 

E 

2 

M 

0 

Q 

5 

u 

6 

D 

H 

2 

X 

3 

B 

Y 

5 

u 

6 

Q 

M 

G A 

3 4 

U 

V 

G 

L 

2 

Q 

3 

D 

B 

5 

5 

6 

No 

1 

D 

2 

0 

3 

z 

R 

D 

2 

E 

3 

F 

B 

L 

2 

K 

F 

E 
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d A reconstruction skeleton of “secondary alphabets” is now made by distnbuting the 
letters m respective Imes correspondmg to the 12 different superimposed pairs of numbers For 
example, all pairs correspondmg to the supenmposition of position 1 of Message 1 with position 1 
of Messf^e 2 are distributed m hues 0 and 1 of the skeleton Thus, the very first superimposed 

pair 181 2 > til® letter Z is mserted in line 1 under the letter V The next {} pair is the 13th super- 

imposition, with I p, the letter D is inserted in Ime 1 undei the letter F, and so on The skeleton 
IS then as follows 
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FlQUSI SI 


e There are more than sufficient data here to permit of the reconstruction of a complete 
equivalent primary component, for example, the followmg 


1 2 3 4 S 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 28 

ITKNPZHMWBQEULFCSJAXRGDVOY 


/ The subsequent steps m the actual decipherment of the text of either of the two messages 
are of considerable mteiest Thus far the cryptanalyst has only the cipher component of the 
primary shdmg components The plain component may be identical with the cipher com¬ 
ponent and may progress m the same direction, or m the reverse direction, or, the two com¬ 
ponents may be different If different, the plam component may be the normal sequence, 
direct or reversed Tests must be made to ascertain which of these various possibihties is true 
g (1) It will first be assumed that the pnmary plam component is the normal direct 
sequence Applymg the procedure outlmed m Par 23 to the message with the shorter key 
(Message No 1, to give the most data per secondary alphabet), an attempt is made to solve 
the message It is unnecessary here to go further mto detail m this procedure, suffice it to 
mdicate that the attempt is unsuccessful and it follows that the plam component is not the 
normal direct sequence A normal reversed sequence is then assumed for the plam component 
and the proper procedure apphed Agam the attempt is found useless Next, it is assumed 
that the plam component is identical with the cipher component, and the procedure outlmed in 
Par 37 is tned This also is unsuccessful Another attempt, assummg the plam component 
runs m the reverse direction, is likewuse unsuccessful There remams one last hypothesis, viz, 
that the two pnmary components are different mixed sequences 
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(2) Here is Message No 1 transcnbed m penods of four letters Umliteral frequency 
distnbutions for the four secondary alphabets are shown below m Fig 62, labeled lo, 2a, 3a, 
and 4a These distributions are based upon the normal sequence A to Z But smce the recon¬ 
structed cipher component is at hand these distnbutions can be rearranged according to the 
sequence of the cipher component, as shown m distnbutions labeled 16, 26, 36, and 46 m Fig 62 
Tht latter distributions may be combined by shifting dutnbutions Zb, Sb, and 4b to proper super- 
impositions mth respect to lb so to yield a single monoaipkabehe distnbidionfor the entire message 
In other words, the polyalphabetic message can be converted into monoalphabetic terms, thus very 
considerably simplifying the solution 

Mbssaqh No 1 " g 

VMYZ VABT la ABCDEF6 hIJKLMN0 PQRSTUVWXYZ 

GEAU AYYU 

NTPK OAYT IlcDEFGHIJKLMNOPQRSTUVWXYZ 

FAYJ DKFE 

IZMBNffNT ^ I -.--5 I- 

UMYK DBQK 3a ABCDEFGHIJKLMNOPQRSTUVWXYZ 

BVFI ULAJ 

VVSE LZIO aIcDEFGHIJKLMNOPQrItU^WXYZ 

OAFS UMAB 

KXKR OAFS _ 

YWCA KXQP 

CZORUYMJ ^ ^ g ^ 

DOZR PWQT ITKNPZHMWBQEULFCSJAXRGDVOY 

DEFBDBTO 

LKFE SIYS 26 ITKNPZHMwIqEULFCSJAXRGDVOY 

SMKS MIYK 

FAFEUROG ^ - isa-.! si 

36 JtkSpzhmwbqeulfcsjaxrgdvoy 

KVQU MWCT 

RCMYMZZV 

ZVOX MVAJ 46 ITKNPZHMWBQEULFcljAXRGD^OY 
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(3) Note m Fig 63 how the four distnbutions are shifted for supenmposition and how the 
combined distnbution presents the charactenstics of a typical monoalphabetic distnbution 

16 itSSpzhIwbqeulfcsjXxrSd^By 

26 lu£F^SJAXRGDVdY?TKNPZHMwiQ 

36 knpzh§wb|eulfcsjIxrgdvByit 


46 pzhmwIqIulfcsjaxKgdvSyitkn 



llGUBE S3 


(4) The letters belonging to alphabets 2, 3, and 4 of Fig 52 may now be transcnbed m terms 
of alphabet 1 That is, the two E’s of alphabet 2 become I’s, the L of alphabet 2 becomes a K, 
the C becomes a P, and so on Likewise, the two K’s of alphabet 3 become I’s, the N becomes 
a T, and so on The entire message is then a monoalphabet and can readily be solved It is as 


follows 

VDVTG ISW 
ENEMY HAS 

FMOMU UKW 
URTRO OPS 

SDIUF MUM 
ANHOU ROR 

VVDJU MNV 
EINFO RCE 

KWWIU FZL 
PSSHO ULD 

LVMRN XMU 
DERIC KRO 


NS K 0 F M V 

C A P T U R E 

IS Y V L F C 

HA V E P U G 

K U W W R P Z 

P 0 S S I B L 

TV D 0 W 0 U 

ME N T S T 0 

P V W V D 0 Y 

BE S E N T V 

S L 
A D 


LIRZZ UDVO 
DHILL ONET 

RDSDL NSDI 
INAND CANH 

GZUDC VMMV 
YLONG ERRE 

KSLLR ORUD 
PADDI TION 

RSCVU MCVO 
lAGEO RGET 


B 

W 

U 

0 

A 

Q 

S 

A 

U 

0 


U U D V U 
0 0 N E 0 


Z L J U 
L D F 0 


M 

R 


F V W 0 M 
U E S T R 


Z 0 M U U 
L T R 0 0 


B D J M V 
W N F R E 


(5) Having the plain text, the denvation of the cipher component (an eqmvalent) is an 
easy matter It is merdy necessary to base the reconstruction upon any of the secondary alpha¬ 
bets, since the plain text—cipher relationship is now known directly, and the primary cipher 
component is at hand The pnmaty plain component is found to be as follows 


1 2 3 4 6 8 7 8 8 10 11 12 13 14 18 18 17 18 19 30 SI 22 23 24 28 28 

HMPCBL RSW ODUGAFQKIYNETV 


(6) The keywords for both messages can now be found, if desirable, by finding the equivalent 
of Ap m each of the secondary alphabets of the original polyalphabetic messages The keyword 
for No 1 is STAR, that for No 2 is OCEANS 

162018—38-7 
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(7) The student may, if he wishes, try to find out whether the primary components recon¬ 
structed above are the ongmal components or are equivalent components, by examining all the 
possible decimations of the two components for evidences of derivation from keywords 

h As already stated m Par 262, there are certain statistical and mathematical tests that 
can be employed m the process of “matchmg” distributions to ascertain proper superimpositions 
for monoalphabeticity In the case just considered there were sufficient data m the distributions 
to pernut the process to be apphed successfully by eye, without necessitating statistical tests 
% This case is an excellent illustration of the apphcation of the process of convertvng a 
polyaiphabehc cipher into monoalphabetic terms Because it is a very valuable and important 
cryptanalytic "trick,” the student should study it most carefully in order to gam a good under- 
standmg of the pimciple upon which it is based and its significance in cryptanalysis Tlie 
conversion m the case under discussion was possible because the sequence of letters forming the 
cipher component had been reconstructed and was known, and therefore the unihteral dis¬ 
tributions for the respective secondary cipher alphabets could theoretically be shifted to correct 
superimpositions for monoalphabeticity It also happened that there were sufiicient data m 
the distributions to give proper indications for their relative displacements Therefore, the 
theoretical possibihty m this case became an actuality Without these two necessary conditions 
the superimposition and conversion cannot be accomplished The student should always be 
on the lookout for situations m which this is possible 

46 Concluding remarks —a The observant student will have noted that a large part of 
this text IS devoted to the elucidation and apphcation of a very few basic prmciples These 
prmciples are, however, extremely important and their proper usage in the hands of a skilled 
cryptanalyst makes them practically indispensable tools of his art The student should therefore 
dnU himself m the apphcation of these tools by having someone make up problem after problem 
for him to practice upon, until he acquires facihty m their use and feels competent to apply 
them m practice whenever the least oppoitumty presents itself This will save him much tune 
and effort m the solution of bona fide messages 

b Contmuing the analytical key introduced m Mihtary Cryptanalysis Part I, the outhne 
for the studies covered by Part II follows herevinth 


I 






Analytical Key for Military Cryptanalysis, Part II * 

(Numbers in parentheses refer to Paragraph Numbers in this text) 



’Xor explanation of tbe use of this chart see For CO of Military Cryptanalysis Fort I 
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APPENDIX 1 

The 12 Types of Cipheh Squares 
(See Paragraph 7) 

Table I-B ‘ 

Components 

(1) ABCDEFGHIJKLMNOPQRSTUVWXYZ 

(2) FBPYRCQZIGSEHTDJUMKVALWN0X 
Enciphering equations Gk/j=0i/i, 0b/i=0o/2 (0i/i is A) 


PLAIN TEXT 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 



lines of the latter have been shifted so as to begin the successive alphabets with the successive letters of the normal 


Table II 

Components 

(1) ABCDEFGHIJKLMNOPQRSTUVWXYZ 

(2) FBPYRCQZIGSEHTDJUMKVALWNOX 

Encipheimg equations 0k/2=0i/ii Op/2=0c/i (0i/i i*? A) 


PLAIN TEXT 


abcdefghijklmnopqr stuvwxy? 
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Table III 


Components 

(1) ABCDEFGHIJKLMNOPQRSTUVWXYZ 

(2) FBPYRCQZIGSEHTDJUMKVALffN0X 
Enciphenng equations 0 »a=0i/ji 0p/i=0r/8 (0i/s is F) 


PLAIN TEXT 
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Table V 


Components 

(1) ABCDEFGHIJKLMNOPQRSTUVWXYZ 

(2) FBPYRCQZIGSEHTDJUMKVALffN0X 
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Table VI 

Components 

(1) ABCDEFGHIJKLMNOPQRSTUVWXYZ 

( 2 ) FBPYRCQZIGSEHTDJUMKVALWN0X 
Enciphenng equations Q%ii=Oen> 0i/i=Op/* (©i/i is A) 
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Table IX 


Components 

(1) ABCDEFGHIJKLMNOPQRSTUVWXYZ 

(2) FBPYRCQZIGSEHTDJUMKVALWN0X 
Enciphonng equations 0k/i=0p/j, 0i/i=Oo/a (0i/i is A) 
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* An interesting fact about this case is that if the plain component is made identical with the cipher com¬ 
ponent (both being the sequence FBPY ), and if the enciphering equations are the same as for Table I-B, 
then the resultant cipher square is identical with Table IX, except that the key letters at the left are in the 
order of the re. ersed mixed component, FXON In other words, the secondary cipher alphabets produced 

by the interaction of two identical mixed components are the same as those given by the interaction of a 
mixed component and the normal component, 
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Table X® 

Components 

(1) ABCDEFGHIJKLMNOPQRSTUVWXYZ 

( 2 ) FBPYRCQZIGSEHTDJUMKVALWN0X 

Enciphenng equations 0k/i='0c/8» 6i/i=0pfl (®i'i 
PLAIN TEXT 

ABCDEFGHIJKLMNOPQ R STUVWXYZ 

aIaIbIc d f__g jiXjLiLiLJlJLA-LAAA XiJLAXA 

B TT Q XJLiLAJLXAAAAl-AiLiLAl. 

c WYZUTPEDSM AZ. A-L A Jl jL A 

D imdyhjekloafb cgztuvwxpqs 
E o’'c’" gaAAAAAAAAAAAAAAAAAAAAAA 
fITqsvucdm ^^aAAAAAAAAAAAAAAA 
G yQ AAAAAAAAAAAAAAAAAAAA 
H YTY L K z u V j w aAAAAAAAAAAAAAAA 
I pgtwvimaunfyxc aAAAAAAAAAAA 
j YYYYTYaAAAAAAAAAAAAAAAAAAA 
K yYTY aAAAAAAAAAAAAAAAAAAAAA 
L YTTYaAAAAAAAAAAAAAAAAAAAAAA 
jhm qtmfnhl a AAAA AAAAAAA a AAAAA a 

M N YYYYYY w X L ^_c_aAAAAAAAAAAAAAA 
0 YTYYYYaAAAAAAAAAAAAAAAAAAA 
p YYTaAAAAAAAAAAAAAAAAAAAAAA 
Q Y¥Y R B u X p ^^aAAAAAAAAXAAAAAA 
R YaAAAAAAAAAAAAAAAAAAAAAAAA 

s H V Naaaaaaaaaaaaaaaaaaaaaaa 
TTAOZRVPC j^aAAAAAAAAAAA A AAAA 
u YYTTYTYY p gaAAAAAAAAAAAAAAA 

VJWFGQLRZYSTUH KVNBXCIEDMAO P 

w YYYYYY'^AAAAAAAAAAAAAAAAAAA 
X YYYYYaAAAAAAAAAAAAAAAAAAAA 
YKXYHGOzs AAAAAAAAAAAAAAA AAA 
z Y F RiT s X I E z|d m|a u w n b c|y g h j|k L|0|p1Q 

» Footnote 2 to Table IX, page 104, also applies to this table, except that the key letters at the left will 
follow the order of the direct mixed component 

































Table XII 
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Table XI 

Components 

(1) ABCDEFGHIJKLMNOPQRSTUVWXYZ 

(2) FBPYRCQZIGSEHTDJUMKVALWN0X 
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Enciphmrg equations Ok/i=0p/8, ©i/j—0c/i (©i/a i*' F) 


Enciplionng equations Ok/j—6c/a, ©i/a—Op/i 
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APPENDIX 2‘ 

Elementary Statistical Theory Applicable to the Phenomena op Eepetition 

IN CrYPTANALIBIS 

1 Introductory —a In Par Qc it was stated that the phenomena of repetition m crypt- 
analytics may be removed from the realm of intuition and dealt with statistically The dis¬ 
cussion of the matter will here be confined to relatively simple phases of the theory of probability, 
a definition of which implies philosophical questions of no practical interest to the student of 
(lyptanalj'sis For his purposes, the following definition of a pnon probabihty will be sufficient 

The probability that an event •will occur is the ratio of the number of “fav- 
01 able cases" to the number of total possible cases, all cases being equally 
likely to occur By a "favorable case" is meant one which will produce the 
event in question 

b In what follows, leference will be made to random assorimenU of letters and especially to 
random text By the latter will be meant merely that the text under consideration has been as¬ 
sumed to have been enciphered by "ome more or less complex cryptographic system so that for 
all practical puiposes the sequence of letters constituting tlus text is a random assortment, that 
IS, the sequence is ]ust about what would have been obtained if the letters had been drawm at 
random out of a box contaimng a large number of the 26 letters of the alphabet, all m equal 
proportions, so that there aie exactly the same numbers of A’s, B’s, C’s, Z’s It is assumed 
that each time m making a drawing fiom such a box, the latter is thoroughly shaken so that the 
letters aie thoroughly mixed and then a single letter is selected at random, recorded, and 
replaced in the same box In what follows, the word “box” will refer to the box as described 

c A umhteral frequency distribution of a large volume of random text will be "flat," 
1 c , lad irg crests and troughs 

d For purposes of statistical analysis, the text of a monoalphabetic substitution cipher is 
equivalent to plain text As a corollary, when a polyalphabetic substitution cipher has been 
1 educed to the simple terms of a eet of monoalphabets, i e , when the letters constituting the 
cipher text have been allocated into their pioper uniliteral distributions, the letters falhng into 
the respective distributions are statistically equivalent to plam text 

2 Data pertauung to single letters —a (1) A single letter will be drawn at random fiom 
the box What is the probability that it will be an A? According to the foregoing definition of 
probability, since the total number of possible cases is 26 and the number of favorable cases is 

here only 1, the probability is 1 26=^= 0385 This is the piobabilitj of drawing an A horn 
the box The probability that the letter drawn will be a 6, a C, a D, , a Z is the same as foi A 
In othei words, the probability of drawing any specified single letter is p= 0385 

(2) The value p= 0385, as found above, may also be termed the probability constant for 
single letters m random text of a 26-lettcr alphabet For any language this constant is merely 
the reciprocal of the total number of diflerent chaiacteis which may be employed in writing the 
text in question 

‘ In the preparation of this appendix, the author has had the benefit of the very helpful suggestions of 
Capt H G Miller, Signal Corps, Mr F B Rowlett, Di S Kullbaek, and Di A Sinkov, Assistant Cryptanalysts, 
U C Sig 0 Certain paits of I)i IviillbaLk's iinpottant iiapei "HlatistK al Methods in Ciyptanalysis" form 
the basis of the discussion 


(3) Another way of interpreting the notation p= 0385 is to say that in a large volume of 
random text, for example m 100,000 letters, ary letter that ore may choose to specify may be 
expected to occur about 3,860 times, in 10,000 letters it may be expected to occur about 385 
times, m 1,000 letters, about 38 5 times, and so on In every-day language it would be said 
that "m the long run” or “on the average” in 1,000 letters of random text there will be about 
38 5 occurrences of each of the 26 letters of the alphabet 

(4) But unfortunately, in cryptenalysis it is not often the case that one has such a large 
number of letters available for study in any single cipher alphabet More often the cryptanalyst 
has a relatively small number of letters and these must be distributed over several cipher 
alphabets Hence it is necessary to be able to deal with smaller numbers of letters Consider 
a specific piece of random text of only 100 letters It has been seen that "in the long run" 
each letter may be expected to occur about 3 85 times in this amount of random text, that is, 
the 26 letters will have an average fiequency of 3 85 But in leaching this av’^erage of 3 85 
occurrences m 100 letters, it is obvious that some letter or letters may not appear at all, some 
may appear once, some twice, and so on How many will not appear at all, how many will 
appear 1, 2, 3, tides’ In other words, how will the different categoiies of letters (differ¬ 
ent m respect to frequency of occurrence) be distnbuted, or what will the distribution be like’ 
WiH it follow any kind of law or pattern’ The cryptanalyst also w ants to know the answer 
to questions such as these "WTiat is the probability that a specified letter will not appeal at 
all m a given piece of text’ That it will appear eroefiy 1, 2, 3, times’ That it will appear 
at least 1, 2, 3, times’ The same soit of questions may be asked with respect to digraphs, 
tngraphs, and so on 

b (1) It may be stated at omc that questions of this nature are not easily answered, and 
a complete discussion falls quite outside the scope of this text However, it will be sufficient 
for the present purposes if the student is provided with a more or less simple and practical means 
of findmg the answers With this m view certain cuives have been prepared from data based 
upon Poisson’s exponential expansion, or the “law of small probabilities’ and their use will 
now be explained Students without a knowledge of the mathematical theory of probability 
and statistics will have to take the curves “on faith” Those mterested in their denvation are 
referred to the following texts 

Fisher, R A, Statistical Methods for Research Workers, London, 1937 

Fry, T C , Probability and Its Engineering Uses, New York, 1928 

(2) By means of these probability curves, it is possible to find, in a relatively easy manner, 
the probabihty for 0, 1, 2, 11 occurrences of an event in n cases, if the mean (expected, 

average, probable) number of occurrenc es in these n cases is known For example, given a cryp¬ 
togram eqmvalent to 100 letters of landom text, what is the probabihty that any specified smgle 
letter, whatever will not appear at aU m the cryptogram’ Since the probabilit y of the occurrence 
of a specified single letter is 0385, and there are 100 letters m the cryptogram, the average 
or expected or mean number of occurrences of an A, a B, a C, , is 0385X 100=3 85 Refer 
now to that probability curve which is marked “Jo”, meamng “frequency zero”, or “zero occur¬ 
rences ” On the horizontal oi x axis of that curve find the point correspondmg to the value 
3 85 and follow the vertical coordinate determined by this value up to the point of intersection 
with the curve itself, then follow the hon/ontel coordinate deteimmed by this mtersection pomt 
over to the left and read the value on the vortical axis of the curve It is approximately 021 
This means that the probabihty that a spec ified single letter (an A, a B, a G, ) will not appear 
at all in the cryptogram, if it really were a peifectly random assortment of lOQ letters, IS 021. 
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That IS, according to the theory of prohabihty, in 1,000 cases of random-text messages of 100 
letters each, one may expect to find about 21 messages m which a specified single lettei will not 
appear at all Another way of saymg the same thing is If 1 000 sets of 100 letters of random 
text are exammed, m about 21 out of the 1,000 such sets any letter that one may choose to 
name will be absent Ihis, of course, k merely a theoretical expectancy, it mdicates only 
what probably will happen in the long run 

(3) What IS the prohabihty that a specified single lettoi wiU appear exactly once m 100 
letters of random text^ To answer this question, find on the cune roarlietl/i, the point of 
mtersection of the \ertical coordmate coiresponding to the meen or average value 3 8‘> with 
the curve, follow the horizontal coordinate thus dctoimmed over to the vertical scale at the 
left, read the value on this scale It is 082, which means that in 1,000 cases of random-text 
messages of 100 letteis each, one may expect to find about 82 messages in which any letter 
one chooses to specify will occur exactly once, no more and no less 

(4) In the same way, the prohabihty that a specified single letter will appear exactly twice 
IS found to be 158, exactly 3 tunes, 202, and so on, as shown in the table below 


100 Utters oj random text 



(5) To find the probabihty that a specified smgle letter will occur at least 1, 2, 3, times 
m a senes of letters constitutmgrandom text, one reasons as follows Since the concept “at least 
1” unpUes that the number specified is to be considered only as the minimum, with no limit 
mdicated as to maximum, occurrences of 2, 3,4, are also “favorable” cases, the probabihties 
for exactly 1, 2, 3, 4, occurrences should therefore be added and this will give the probability 
for “at least 1 ” Thus, m the case of 100 letters, the sum of the probabilities for exactly 1 to 11 
occurrences, as set forth m the table directly above, is 978, and the latter value approximates 
the probability for at least 1 occurrence 

(6) A more accurate result will be obtained by the follow mg reasomng The probability 
for zero occurrences is 021 Smee it is certam that a specified letter will occur either zero times 
or 1, 2, 3, times, to find the probabihty for at least one time it it. merely necessary to sub¬ 
tract the probability for zero occurrences from unity That is, 1— 021= 979, which is 001 
greater than the result obtamed by the other method The reason it is greater is that the value 
979 includes occurrences beyond 11, which were excluded from the previous calculation Of 
course, the probabilities for these occurrences beyond 11 are very small, but taken all together they 
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add up to 001, the difference between the results obtained by the two methods The proba- 
bihty for at least 2 occuirences is the difference between umty and the sum of the probabihty 
for zero and exactly 1 occurrences, that is, 1 —(Po+Pi)=l—(021+ 082)=1— 103 - 897 The 
respective probabilities for various numbers of occurrences of a specified smgle letter (from 0 to 
11) are given m the following table 


100 letters of random text 



(7) The foregomg calculations refer to random text composed of 100 letters For other 
numbers of letters, it is iiieiely necessary to find the mean (multiply the probabihty for drawing 
a speafied single letter out of the box, which is ^ or 0385, by the numbei of letters m the 
assortment) and refer to the vanous curves, as before For example, for a random assortment 
of 200 letters, the mean is 200 X 0385, or 7 7, and this is the value of the point to be sought along 
the horizontal or x axes of the curves, the intersections of the respective vertical lines correspond- 
mg to this mean with the various curves for 0, 1, 2, 3, occurrences give the probabilities for 
these occurrences, the reading being taken on the vertical or y axes of the curves 

(8) The discussion thus far has dealt with the probabihties for 0, 1, 2, 3, occurrences 
of specified smgle letters It may be of more practical advantage to the student if he could be 
shown how to find the answer to these questions Gi\en a random assortment of 100 letters 
how many letters may be expected to occur eiacUy 0, 1,2, 3, times‘d How many may be 
expected to occur at least 1, 2, 3, times? The curves may here again be used to answer 
these questions, by a very simple calculation multiply the probabihty value as obtained above 
for a specified single letter by the number of different elements bemg considered For example, 
the probability that a specified smgle letter will occur exactly twice m a perfectly random assort¬ 
ment of 100 letters is 158, smce the number of different letters is 26, the absolute number of single 
letters that may be expected to occur exactly 2 times m this assortment is 158X26=4 108 
That IS, in 100 letters of randm text there should be about four letters which occur exactly 2 times 
The following table gives the data for vanoi s numbers of occurrences 
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100 letters of random text 



(9) Keferring again to the curves, and specificallv to the tabulated results set forth directly 
above, it will be seen that the probability that there will be exactly two occurrences of a specified 
single letter m 100 letters of random text (158), is less than the probabihty that there will be 
exactly three occurrences (202), m other words, the chances that a specified smgle letter will 
occur exactly three tunes are better, by about 25 percent, than that it will occur only two tunes 
Furthermore, there will be about five letters which will occur exactly 3 times, and about five 
which will occur exactly 4 times, whereas there will be only about two letters which will occur 
exactly 1 time Other facts of a similar import may be deduced from the foregomg table 

c The discussion thus far has dealt with random assortments of letters What about other 
types of texts, for example, normal plain text’ What is the probabihty that E will occur 0, 1, 
2, 3, tunes m 50 letters of normal Enghsh’ The relative frequency value or probability 
that a letter selected at random from a lai^e volume of normal Enghsh text will be E is 12604 
(In 100,000 letters E occurred 12,604 tunes ) For 50 letters this value must be multiphed by 50, 
givmg 6 3 as the mean or point to be found along the x axes of the curves The probabihties for 
0, 1, 2, 3, occunences are tabulated below 

60 letters of normal Enghsh plain text 
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d (1) It has been seen that the probabihty of occurrence of a specified smgle letter m random 
text employmg a 26-letter alphabet is 0385 If a considerable volume of such text is 

written on a large sheet of paper and a pencil is directed at random toward this text, the probabil¬ 
ity that the pencil pomt wiU hit the letter A, or any other letter which may he specified in advance, 
IS 0385 Now suppose two pencils are directed simultaneously toward the sheet of paper The 

probabihty that both pencil pomts wiU hit two A’s is 00148, smce m this case 

one IS deahng with the probability of the simultaneous occurrence of two events which are 
mdependent The probabihty of hittmg two B’s, two C’s, , two Z's is likewise ^ Hence, 

if no particular letter is specified, and merely this question is asked “What is the probabihty 
that both pencil pomts will hit the same letter’” the answer must be the sum of the separate 
probabihties for simultaneously hittmg two A's, two B’s, and so on, for the whole alphabet, 

which IS 26X^==^= 0385 This, then, is the probabihty that any two letters selected at random 

in random text of a 26-letter alphabet will be identical or will coincide Smce this value remams 
the same so long as the number of alphabetic elements remams fixed, it may be said that the 
probability of monographic coincidence in random text of a 26-element alphabet is 0385 The fore¬ 
gomg italicized expression * is important enough to warrant assigning a special symbol to it, viz, 
Kr (read “kappa sub-r”) For a 26-element alphabet, then, ic,= 0385 

(2) Now if one asks “Given a random assortment of 10 letters, what are the respective 
probabilities of occurrence of 0, 1, 2, smgle-letter comcidences’” one proceeds as follows 
As before, it is first necessary to find the mean or expected number of comcidences and then 
refer to the various probability curves To find the mean, one reasons as follows Given a 
sequence of 10 letters, one may begm with the 1st letter and compare it with the 2d, 3d, 10th 
letter to see if any two letters comcide, 9 such comparisons may be made, or m other words there 
are, begmnmg with the 1st letter, 9 opportumties for the occurrence of a comcidence But 
one may also start with the 2nd letter and compare it with the 3d, 4th 10th letter, thus 
3 neldmg 8 more opportumties for the occurrence of a comcidence, and so on This process may 
contmue until one reaches the 9th letter and compares it with the 10th, yieldmg but one oppor- 
tumty for the occurrence m question The total number of comparisons that can he made is 
therefore the sum of the senes of numbers 9, 8, 7, 1, which is 45 compansons ® Smce m 

the 10 letters there are 45 opportumties for comcidence of smgle letters, and smce the probability 


> The expression itself may be termed a parameter, which in mathematics is often used to designate a constant 
that characterizes by each of its particular values some particular member of a system of values, functions, etc 
The word is apphcable in the case under discussior because the value obtained forxr is 0385, for a 25-flement 
alphabet, *,= 0400, for a 27-element alphabet, *,= 0370, etc 

* The number of compansons may readilv be found by the formula - 1 where n is the total number 

of letters mvolved This formula is merely a special case under the general formula for ascertaming the number 
of combinations that may be made of n different things taken r at a time, which is (n—r)i 

present case, since only two letters arc compared at a time, r is always 2, and hence the expression 
which IS the same as ’ becomes by cancellation of the term (n—2)l reduced to 
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for moDc^aphie coincid^ee m random text is 0385 the expected number of comcldences is 
.0385X45 = 1 7325 With m=l 7 one consults the various probabihty curves and an approxi¬ 
mate distnbutionfor exactly and for at least 0,1,2, coincidences mayreadilybe ascertamed * 
e ( 1 ) Now consider the matter of monographic coincidence in Enghsh plam text * Follow¬ 
ing the same reasoning outlmed m subpar d (1), the probabihty of coincidence of two A’s in plam 
text IS the square of the probabihty of occurrence of the single letter A m such text The 
probability of coincidence of two B’s is the square of the probability of occurrence of the single 
letter B, and so on The sum of these squares for all the letters of the alphabet, as shown in 
the following table, is found to be 06&7 


Letter 

Fretinency > in 
1,000 letters 

Probability of sep 
arate OLmrrence 
of the letter 

Square of probe 
billty of separate 
occoneiKe 

A 

73 66 

0 0737 

0 0054 

B 

9 74 

0097 

0001 

C. 

30 68 

0307 

0009 

D 

42 44 

0424 

0018 

E 

129 06 

1300 

0169 

F 

28 32 

0283 

0008 

G 

16 38 

0164 

0003 

H 

33 88 

0339 

0012 

I 

73 52 

0735 

0054 

J - . 

1 64 

0016 

0000 

K . _ . . 

2 96 

0030 

0000 

L 

36 42 

0364 

0013 

M 

24 74 

0247 

0006 

N 

79 50 

0795 

0063 

0 

76 28 

0753 

0057 

P 

26 70 

0267 

0007 

Q 

3 SO 

0035 

0000 

R 

75 76 

0768 

0067 

S 

61 16 

0612 

0037 

T 

91 90 

0919 

0084 

U 

26 00 

0260 

0007 

V 

IS 32 

0163 

0002 

W 

15 60 

0156 

0002 

X 

4 62 

0046 

0000 

Y 

19 34 

0193 

0004 

Z 

98 

0010 

0000 

Total 

1.000 00 

1 0000 

0667 

1 The data given are taken from Table 3 Appendix 1 Military Cryptanaljsis Part I | 


This then is the probability that any two letters selected at random in a large volume of 
normal Enghsh telegraphic plam text will coincide Since this value remains the same so long 
as the character of the language does not change radically, it may be said that the probaMiiy 
of monographic coincidence in English telegraphic plain text is 0667, or Kp= 0667 

‘ The approximation given by the Poisson distribution m the case of single letters is not as good as that 
Ill the case of digraphs, tngraphs, etc , discussed in paragraphs 3, 4, below 

‘ The theory of monographic coincidence in plain text was originally developed and applied by the author 
in a technical paper written in 1925 dealing with his solution of messages enciphered by a cryptograph known 
as the “Hebern Electric Super-Code ” The paper was printed in 1934 


- ^ uj^ ^ A-Zj s .eoSfc'ig 
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(2) Given 10 letters of English plam text, what is the probabihty that there wUl be 0, 1, 

2, smgle-letter eomcidences? Following the hne of reasonmg m subparagraph d (2), the 
expected number of coincidences is 0667 X45 =3 00, or m=3 The distribution for exactly and 
for at least 0, 1,2, coincidences may readily be found by reference to the vanous probabihty 
curves (See footnote 4 ) 

f The fact that Kp (for Enghsh) is almost twice as great as Kr is of considerable importance 
m cryptanalysis It be dealt with m detail m a subsequent text At this pomt it will mere¬ 
ly be said that Xp and k, for other languages ^md alphabets have been calculated and show con¬ 
siderable variation, as will be noted m the table shown m paragraph 3d 

3 Data pertaining to digraphs .—a (1) The foregoing discussion has been lestricted to 
questions concerning single letters, but by slight modification it can be apphed to questions 
concerning digiaphs, tngraphs, and longer polygraphs 

(2) In the preceding cases it was necessary, before refemng to the vanous probability 
curves, to find the mean or expected number of occurrences of the event in question in the 
total number of cases or tnals being considered Given a piece of random text totalhng 100 
letters, for example, what is the mean (average, probable, expected) number of occurrences of 
digraphs m this text'i' Since there are 676 different digraphs, the probability of occurrence 

of any specified digraph is 0 ^= 00148, since in 100 letters there are 99 digiaphs (if the letteis 
are taken consecutivelv m pairs) the mean or average number of occurrences in this case is 
00148X99= 147 Having the mean number of occurrences of the event under consideration, 
one may now find the answers to these questions IVhat is the probability that any specified 
digraph, say XY, wiU not occur^ What is the probabihty that it will occur exactly 1, 2, 

3, times? At least 1, 2, 3, times? 

(3) Agam the probability curves may be used as before, for the type of distnbution is the 
same The following values are obtainable by reference to the various curves, using the mean 
value 00148X99= 147 

100 letters of random text 


Fre(|uency 

Probability that 
a specified digraph 
will oc^ exactly 

Probability that 
a speciSed digraph 
will occur at least 
z times 

Probable Dumber 
of digraphs ap> 
pearmg^Bctly 

Probable number 
of digraphs ap¬ 
pearing at least 

0 

0 86 

1 00 

581 36 

676 00 

1 

13 

14 

87 88 

94.64 

2 

01 

01 

6 76 

6 76 

3 

00 

00 

0 00 

0 00 


(4) Thus It IS seen that in 100 letters of random text the probability that a specified digraph 
will occur exactly once, for example, is 13, at least once, 14, at least twice, 01 The probability 
tiiat a specified digraph will occur at least 3 times is negligible (By calculation, it is found to 
to be 0005 ) 

b (1) The probabihty of digraphic coincidence m random text based upon a 26-element 
alphabet is of course quite simply obtained since there are 26® different digraphs, the probability 

of selectmg any specified digraph in random text is ^ The probability of selecting two iden¬ 
tical digraphs in such text, when the digraphs are specified, is Smee there are 26® 

different digraphs, the probabihty of digraphic coincidence m random text, k ^, is 26*X^=^= 


00148 
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(2) Given a random assortment of 100 letters, what is the prohahility of occurrence of 

0, 1, 2, digraphic coincidences? FoUowmg the hne of reasonmg m paragraph 2d (2), m 
100 letters the total number of compansons that may be made to see if two digraphs comcide 
18 4,851 This number is obtamed as follows Consider the let and 2d letters m the senes of 
100 letters, they may be combined to from a digraph to be compared with the digraphs formed 
by combming the 2d and 3d, the 3d and 4th, the 4th and 5th letters, and so on, givmg a total of 
98 compansons Consider the digraph formed by combmmg the 2d and 3d letters, it may be 
compared with the digraphs formed by combming the 3d and 4th, 4th and 5th letters, and so on, 
giving a total of 97 compansons This piocess may be continued down to the digraph formed 
by combmmg the 98th and 99th letters, which yields only one comparison, since it may be 
compared only with the digraph resultmg from combmmg the 99th and 100th letters The 
total number of compansons is the sum of the sequence of numbers 98, 97, 96, 95, 1, which 

IS 4,851 • 

(3) Since m the 100 letters there are 4,851 opportunities for the occurrence of a digraphic 

comcidence, and smce 00148, the expected number of coincidences is 00148X4851= 
7 17948=7 2 The vanous probabihty curves may now be referred to and the follow ing results 
are obtamed , 

Dutnbulum for 100 Utters of random text 



c In this table it will be noted that it is almost certain that m 100 letters of random text 
there will be at least one digraphic comcidence, despite the fact that there are 676 possible 
digraphs and only 99 of them have appeared m 100 letters When one thmks of a total of 676 
different digraphs from which the 99 digraphs may be selected it may appear rather mcredible 
that the chances are better than even ( 582) that one will find at least 7 digraphic comcidences m 
100 letters of random text, yet that is what the statistical analysis of the problem shows to be 
the case These are, oj course, purely accidental repetitions It is important that the student 
should fully rcahze that more comcidences or accidental repetitions than he feels mtmtively 
should occur m random text will actually occur in the cryptograms he will study He must 
therefore be on guard agamst puttmg too much rehance upon the surface appearances of the 
phenomena of repetition, he must calculate what may be expected from pure chance, to make 
sure that the number and length of the repetitions he does see m a cryptogram are really better 
than what may be expected m random text In studymg cryptograms composed of figures this 
• The formula for finding the number of comparisons that can be made is as follows, where «=the total 
number of letters in the sequence and f is the length of the polygraph No, of compansons- - 
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» yery important, for as the number of different symbols decreases the probability for purely 
ebapoe comcidences mcreases 

d. (1) For convemenoe the foUowmg values of the reciprocals of vanous numbers from 20 to 
36, and of the reciprocals of the squares, cubes, and 4th powers of these numbers are listed; 


r 

If* 

l/H 

i/ii 

l/H 

20 

0 0500 

0 002500 

0 000125 

0 00000625 

21 

0476 

002260 

000108 

00000514 

22 

0455 

002070 

000094 

00000429 

23 

0435 

001892 

000082 

00000358 

24 

0417 

001739 

000073 

00000302 

25 

0400 

001600 

000064 

00000256 

26 

0385 

001482 

000057 

00000220 

27 

0370 

001369 

000051 

00000187 

28 

0357 

001274 

000046 

00000162 

29 

0345 

001190 

000041 

00000142 

30 

0333 

001109 

000037 

00000123 

31 

0323 

001043 

000034 

00000109 

32 

0313 

000980 

000031 

00000096 

33 

0303 

000918 

000028 

00000084 

34 

0294 

000364 

000025 

00000075 

35 

0286 

000818 

000023 

00000067 

36 

0278 

000773 

000021 

00000060 


(2) The foUowmg table gives the probabihties for monographic and digraphic comcidence 
for plain-text m several languages 


languago 

V 


English. 

0 0667 

0 0069 

French... 

0778 

0093 

German... 

0762 

0112 

Italian. 

073$ 

0081 

Spanish... 

0775 

0093 


4 Data pertaming to tngraphs, etc —a Enough has been shown to make clear to the student 
how to calculate probabihty data concemmg tngraphs, tetragraphs, and longer polygraphs 
b (1) For example, m 100 letters of random text the value of m (the mean) for trigraphs 
IS 00005689X100= 005689 With so smaU a value, the probabihty curves are hardly uaable, 
bqt at any rate they show that the probability of occurrence of a specified tngraph in so smaU 
a volume of text is so smaU as to be practicaUy negligible The probabihty of a specified tngraph 
occurrmg twice m that text is an even smaUer quantity 

(2) The calculation for findmg the probability of at least one tngraphic comcidence in 100 
letters of random text is as foUows 

m=^^^^^(^A^=4,753X 0000568912= 2704= 27 

Referring to curve/o, with m= 27 the probabihty of finding no tngraphic comcidence is 76. 
The probability of findmg at least one tngraphic comcidence is therefore 1— 76= 24 
c The calculation for a tetragraphic comcidence is as foUows 

2^0 fe)^4,656X 0000021888= 0101= 01 

Referrmg to curve/o, with m= 01 the probability of fi n di ng no tetragraphic cpmcidenca is 
so high as to amount almost to certainty Consequently, the probability of findmg at least 
ie2018-%-8 
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one tetragraphic coincidence is practically nil (It is calculated to be 0094=approximately 01 
This means that m a hundred cases of 100-letter random-text cryptograms, one might expect 
to find but one cryptogram m which a 4-letter repetition is brought about purely by chance, it 
IS, m common parlance, a “hundred to one shot ”) Consequently, if a tetragraphic repetition 
is found m a cryptogram of 100 letters, the probability that it is an accidental repetition is 
extremely small If not accidental, then it must be causal, and the cause should be ascertamed 
5 An example —a The message of Par 9a of the text proper will be employed First, let 
the repetitions be sought and underlined, then the repetitions are hsted for convenience 

A U S Y E S E C P M P_L CCLN XBWCS OXUVD 

B ^RHT HXIPJj IB_CIJ U S Y E E G U R D P 

C AY BOX OFPJW JEMGP XVEUE L E J Y Q. 

D MUS_CX J_YMSG LL_ETA L_EDE_C GBMFI 


Group 

Number of 
occurrences 

BC 

2 

CX 

2 

EC 

2 

LE 

3 

JY 

2 

PL 

2 

SC 

2 

SY 

2 

US 

3 

YE 

2 

SYE 

2 

USY 

2 

USYE 

2 


b Referrmg to the table m Par 3o (3) above, it will be seen that m 100 letters of random 
text one might expect to find about 7 digraphs appealing at least twice and no digiaph appealing 
3 times The list of repetitions shows 8 digraphs occurrmg twice and 2 occurrmg 3 tunes 

c Again, the hst of repetitions shows 10 digraphs each repeated at least twice, the table m 
Par 36 (3) above shows that m 100 letters of random text the probability of findmg at least 
that many digraphic comcidences is only 193 That is, the chances of this bemg an accident are 
but 176 m a thousand, or another way of expressmg the same thmg is to say that the odds against 
this phenomenon bemg an accident are as 807 is to 193 or roughly 4 to 1 

d The probability of finding at least one tngraphic coincidence m 100 letters of random 
text IS very small, as noted m Par 46, the probabdity of findmg at least one tetragraphic coin¬ 
cidence IS still smaller (Par 4c) Yet this cipher message of but 100 letters contams a repetition 
of this length 

e A consideration of the foregomg leads to the conclusion that the number and length of the 
repetitions manifested by the cryptogram are not accidental, such as might be expected to occur 
m random text of the same length, hence they must be causal m their ongm The cause m this 
case IS not difllcult to find repeated isolated letters and repeated sequences of letters (digraphs, 
tngraphs) m the plam text were actually enciphered by identical alphabets, resulting in producing 
repeated letters and sequences in the cipher text 
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